CORS
CORS, EK, BROWSER, SECURITY, MECHANISM, hai — DIFFERENT, ORIGIN, (DOMAIN/PORT) SE, AANE, WALI, REQUESTS, ko, DEFAULT, mein, BLOCK, kiya, jaata hai (SAME-ORIGIN, POLICY). SERVER, ko, EXPLICITLY, ALLOW, karna, PADТA, hai, ki, KAUN, se, ORIGINS, se, REQUESTS, ACCEPT, kiye, jaayenge.
cors, NPM, PACKAGE, se, EASILY, CONFIGURE, kiya, ja, sakta hai — origin, OPTION, SE, SPECIFIC, DOMAINS, ALLOW, kiye, ja, sakte, hain, credentials: true, se, COOKIES, ke, saath, CROSS-ORIGIN, REQUESTS, ALLOW, hote, hain.
const cors = require("cors");
app.use(cors({
origin: ["https://myapp.com", "https://admin.myapp.com"],
credentials: true, // cookies, ke, saath, requests, allow
}));
// Specific route, PAR, bhi, apply, kiya, ja, sakta hai:
app.get("/api/data", cors({ origin: "https://partner.com" }), handler);- CORS = browser security mechanism — cross-origin requests, default, mein, BLOCK
- Server, explicitly, ALLOWED, origins, SPECIFY, karta hai
- origin: "*" development mein, OK, production, mein, RISKY
COMPLEX, REQUESTS, (jaise, PUT, DELETE, YA, CUSTOM, HEADERS, ke, saath) BROWSER, PEHLE, EK, OPTIONS, "PREFLIGHT" REQUEST, BHEJTA, hai — SERVER, ko, YE, RESPOND, karna, PADТA, hai, ki, ACTUAL, REQUEST, ALLOWED, hai, YA, NAHI.
// cors package, automatically, preflight, OPTIONS, requests, HANDLE, karta hai
app.use(cors()); // OPTIONS requests, automatically, respond, ho, jaati, hainCORS, EK, BROWSER, SECURITY, FEATURE, hai — Postman, YA, curl, se, REQUEST, BHEJNE, PAR, CORS, ERRORS, NAHI, AATE, kyunki, YE, ENFORCEMENT, BROWSER, ke, JAVASCRIPT, ENGINE, mein, HOTA, hai, SERVER, mein, NAHI.