浏览器跨域问题
除了需要设置 Access-Control-Allow-Origin外, 还需要设置Access-Control-Allow-Headers 添加上可允许的header字段。
Access-Control-Allow-Headers1
2
3res.header("Access-Control-Allow-Origin", "*");
res.header("Access-Control-Allow-Headers", "Content-Type,access-control-allow-origin,X-Requested-With");
res.header("Access-Control-Allow-Methods","PUT,POST,GET,DELETE,OPTIONS");
错误提示
Response to preflight request doesn’t pass access control check: No ‘Access-Control-Allow-Origin’ header is present on the requested resource
没有Access-Control-Allow-Origin头，需要在返回头中添加上Access-Control-Allow-Origin字段，包含对应的域名
Request header field access-control-allow-origin is not allowed by Access-Control-Allow-Headers in preflight response.
access-control-allow-origin请求头不被允许, 需要添加Access-Control-Allow-Headers头, 声明需要的header字段。