I've organized my application into a 3-tier structure. The server is powered by node.js and the front end is built with Angular. For user login and authentication, I'm using passport. However, I've encountered an issue where my passport login cannot maintain a cross-domain session on the front end.
The server is running on localhost:3000 while the front end app is on localhost:9000.
I attempted to configure CORS requests in Express by setting options as:
app.use(function(req, res, next) {
res.header('Access-Control-Allow-Credentials', true);
res.header('Access-Control-Allow-Origin', req.headers.origin);
res.header('Access-Control-Allow-Methods', 'GET,PUT,POST,DELETE');
res.header('Access-Control-Allow-Headers', 'X-Requested-With, X-HTTP-Method-Override, Content-Type, Accept');
if ('OPTIONS' == req.method) {
res.send(200);
} else {
next();
}
});
I also tried using the CORS module in Node.js, but nothing seems to be working for me. Any help or suggestions would be greatly appreciated.