CORS Proxy
This simple Node.js-based proxy allows your JavaScript application to call services that are hosted on a different domain and that don't support CORS.
Because the proxy is itself CORS-enabled, your application and the proxy don't have to be hosted on the same domain.
This proxy was tested with the Salesforce.com REST API, but it should work with other services as well.
Installation
There are different options to get your own instance of the CORS proxy up and running:
-
Deploy to Heroku (easiest): click the 'Deploy to Heroku' button at the top of this page
-
Install a local version
-
Clone this repository
-
Install the server dependencies
npm install -
Start the server
node server
-
Usage
When making an API call using JavaScript (using XMLHTTPRequest, $.ajax, etc):
-
Substitute the actual service URL with the Proxy URL
-
Set the request method, query parameters, and body as usual
-
Set the actual service URL in a header named 'Target-Endpoint'
-
Send the request as usual
CORS Headers
The proxy allows all origins, methods, and headers. You probably want to lock this down in a production environment.
Other Headers
The proxy currently passes the "Authorization" header to the target endpoint. You can modify the proxy to pass additional headers (or all of them).
Other Implementations
Check out James Ward's Saleforce CORS Proxy written in Scala.