Express and fetch api problem

Question

0.00/5 (No votes)

See more:

hi i have creates an api using php and i defined the

PHP

header("Access-Control-Allow-Origin: http://localhost:81/api/Students/read.php");
header("Access-Control-Allow-Headers: http://localhost:81/api/Students/read.php");

but when i used the express code it doesn't recognize it the code for my route
middleware that i made i express is below can any one help me

this is the route that i am using:

JavaScript

studentRoute.get('/Students/api' ,(req,res,next)=>{
    
    fetchs('http://localhost:82/students-Api/api/Students/read.php',{
        headers:{
            'Access-control-Allow-Origin':"http://localhost:81/api/Students/read.php"
        }
    })
    .then(response=>{
        response.json().then(data=>{
              console.log(req.xhr)
              res.send(data)
        }).catch(err=>{
            next(err)
        })
    }).catch(err=>{
        next(err)
    })
})

What I have tried:

i have tried to use the req.header to set header using this code :

JavaScript

<pre>
studentRoute.get('/Students/api' ,(req,res,next)=>{
    
    req.header("Access-control-Allow-Origin","http://localhost:81/api/Students/read.php")
    fetchs('http://localhost:82/students-Api/api/Students/read.php')
    .then(response=>{
        response.json().then(data=>{
              console.log(req.xhr)
              res.send(data)
        }).catch(err=>{
            next(err)
        })
    }).catch(err=>{
        next(err)
    })
})

Posted 9-Feb-22 8:04am

Member 14479161

Updated 9-Feb-22 22:26pm

Add a Solution

1 solution

Add a Solution

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Richard Deeming · Accepted Answer · 2022-02-09T22:26:00

The CORS headers need to be sent in the response from the server you're trying to access, not in the request headers sent by your Javascript. If the initiating party was able to control the headers, then they wouldn't serve any purpose.

The Access-Control-Allow-Origin header should specify the origin, not the full URL. In this case, the origin would be http://localhost:81.

The Access-Control-Allow-Headers header is used to specify the name of the HTTP headers which can be sent. Specifying a URL for this header is invalid.

Cross-Origin Resource Sharing (CORS) - HTTP | MDN[^]

Express and fetch api problem

1 solution

Solution 1

Add your solution here

Preview 0

Express and fetch api problem

1 solution

Solution 1

Add your solution here

Preview 0

Existing Members

...or Join us