Not allowed by Access-Control-Allow-Origin issue

Question

I'm rtying to POST some data from client-side to server-side's script and I still got this Eroor:

OPTIONS http://localhost/site/dbs.js Origin http://localhost:8080 is not allowed by Access-Control-Allow-Origin. jquery.js:9597
XMLHttpRequest cannot load http://localhost/site/dbs.js. Origin http://localhost:8080 is not allowed by Access-Control-Allow-Origin.

server.js is runing no node.js (path /wamp/www/site/server.js)

var app = require('express')();
var server = require('http').createServer(app);
var mysql = require('mysql');
var port = process.env.PORT || 8080;
server.listen(port);

app.get('/', function(req, res){
  res.sendfile(__dirname + '/index.html');
});

app.get('/dbs.js', function(req, res) {
  res.sendfile(__dirname + '/dbs.js');
});

in index.html with ajax() I call to post some data to dbs.js:

$.ajax({
        type: "POST",
        url: " http://localhost:80/site/dbs.js",
        data: "name="+username+"&pwd="password,
        succes: function(ret)
        {
          if(ret==0)
            ;
        }
      });

dbs.js:

var name;
var pwd;
function DbConn()
{
            var mydb = mysql.createConnection({
              host: 'localhost',
              user: 'root',
              password: 'admin123',
              database: 'users'
            });

            mydb.connect();

            var query = ('select passwd from peer where username=' + username);

            console.log(query);

            connection.end(function(err) {
              // The connection is terminated now
            });
}

If I change somethig in URL, I got an Error: 404 - Not found "dbs.js" All source is in one folder(wamp/www/site/). Do you think it will be necessary add some XML header in dbs.js

Check this question http://stackoverflow.com/questions/18310394/no-access-control-allow-origin-node-apache-port-issue — goker, Feb 27 '14 at 07:42

score 2 · Accepted Answer · edited May 23 '17 at 12:07

2

There is a common problem with localhost, ajax calls (and chrome) which result in the error you have. Please take a look at the related question, especially this one: Origin http://localhost is not allowed by Access-Control-Allow-Origin

edited May 23 '17 at 12:07

Community

1
1

answered May 10 '13 at 21:35

Roemer

3,566
1
16
32

score 0 · Answer 2 · edited Apr 11 '16 at 19:16

I had to battle with this error for a while, but finally conquered it. I was getting this error because I was trying to create a SocketIO connection across different domains. Did some research and turns out browsers don't like making any cross domain requests (ajax,sockets ...) within the rending html page. Turns out the server (the one we are making the illegal request to) has to allow this functionality.

In your case try an express middleware before all your routes:

//Gloabal middleware
app.get('/*',function(request,response,next){
  response.header('Access-Control-Allow-Origin' , 'http://domain' );
  response.header('Access-Control-Allow-Credentials', true);
  next();
});

I just saw that your ajax call, calls to port 80. But in your server.js , you might be registering it under port 8080. You should double check what port your server is listening on and correct your ajax accordingly. — jaycruz805, Dec 07 '15 at 01:21

Not allowed by Access-Control-Allow-Origin issue

2 Answers2