设置访问控制允许来源不起作用？

Question

我正在努力让Azure上的其他api的CORS设置引起关注

'use strict';
var debug = require('debug');
var express = require('express');
var path = require('path');
var favicon = require('serve-favicon');
var logger = require('morgan');
var cookieParser = require('cookie-parser');
var bodyParser = require('body-parser');
var cors = require('cors');
var routes = require('./routes/index');
//var users = require('./routes/users');

var app = express();
app.use(function (req, res, next) {
    res.header("Access-Control-Allow-Origin", "*");
    res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept");
    next();
});

app.use(cors());

似乎不起作用，有什么选择/或者我错过了什么吗？

Answer 1

我使用以下代码在我的网站中进行了测试，它与响应标头中的cors一起使用时效果很好。

var cors = require('cors');
var express = require('express');
var app = express();
app.use(function (req, res, next) {
    res.header("Access-Control-Allow-Origin", "*");
    res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept");
    next();
});

app.use(cors());

app.get('/', function(req, res, next) {
    var data = {
        "Fruits": [
          "apple",
          "orange"    ]
      };
      res.json(data);
   });
app.listen(3000, function () {
console.log('CORS-enabled web server listening on port 3000')
});