ajax跨域方法之CORS跨域总结

php端添加
header('Access-Control-Allow-Origin: *');
header('Access-Control-Allow-Headers: content-type');
header('Access-Control-Allow-Methods: POST');

nodejs 配置全站路由都允许跨域
var allowCrossDomain = function(req, res, next) {
res.header('Access-Control-Allow-Origin', '*');
res.header('Access-Control-Allow-Methods', 'GET,PUT,POST,DELETE');
res.header('Access-Control-Allow-Headers', 'Content-Type');
res.header('Access-Control-Allow-Credentials','true');
next();
};
app.use(allowCrossDomain);

标准的CORS请求不对cookies做任何事情，既不发送也不改变。如果希望改变这一情况，就需要将withCredentials设置为true。
xhr.withCredentials =
true;
服务端在处理这一请求时，也需要将Access-Control-Allow-Credentials设置为true
//allow custom header and CORSapp.all('*',function
(req,
res,
next)
{ res.header('Access-Control-Allow-Origin',
'*'); res.header('Access-Control-Allow-Headers',
'Content-Type, Content-Length, Authorization, Accept, X-Requested-With , yourHeaderFeild');
res.header('Access-Control-Allow-Methods',
'PUT, POST, GET, DELETE, OPTIONS');
if
(req.method
==
'OPTIONS')
{ res.send(200);
/让
4000
options请求快速返回/
}
else
{
next();
}});

nodejs接口转发代理中间件配置cros示例
var http = require('http')
var proxy = require('express-http-proxy');
var app = require('express')();
var allowCrossDomain = function(req, res, next) {
res.header('Access-Control-Allow-Origin', '*');
res.header('Access-Control-Allow-Methods', 'GET,PUT,POST,DELETE');
res.header('Access-Control-Allow-Headers', 'Content-Type');
res.header('Access-Control-Allow-Credentials','true');
next();
};
app.use(allowCrossDomain);
app.use('/', proxy('http://fanyi.baidu.com/'));

http.createServer(app).listen(580, function () {
console.log('server listening on port ' + 580);
});

angular 需要添加请求头  http://blog.sina.com.cn/s/blog_5be1dc830101k2ds.html
 $http({
    url:'http://10.97.204.88:8000/authenticate',
    method:"POST",
    headers: {
       
 'Content-Type': 'application/x-www-form-urlencoded; charset=UTF-8'
    },
    data:$scope.user
  })