What are some examples of CORS headers configuration?

Can you provide some examples of how to configure CORS headers?

Sure! CORS (Cross-Origin Resource Sharing) headers allow you to specify which domains can access your resources. For example, to allow requests from a specific domain, you can set the Access-Control-Allow-Origin header like this:

Access-Control-Allow-Origin: https://example.com

What if I want to allow multiple domains?

In that case, you would need to dynamically set the Access-Control-Allow-Origin header based on the request's origin. Here's a simple example in Node.js:

const allowedOrigins = ['https://example.com', 'https://another-example.com'];
app.use((req, res, next) => {
    const origin = req.headers.origin;
    if (allowedOrigins.includes(origin)) {
        res.setHeader('Access-Control-Allow-Origin', origin);
    }
    next();
});

Are there any other important CORS headers I should know about?

Yes, there are a few other important headers:

• Access-Control-Allow-Methods: Specifies the methods allowed (e.g., GET, POST).
• Access-Control-Allow-Headers: Specifies which headers can be used in the actual request.
• Access-Control-Allow-Credentials: Indicates whether credentials are allowed in the request.

How do I test if my CORS configuration is working?

You can test your CORS configuration using tools like Postman or by making requests from a web application. Check the response headers to see if the CORS headers are set correctly.