从NodeJS服务器到PHP服务器的CORS AJAX请求

Question

So I'm making an AJAX request from a node server to a PHP server. The PHP server looks like this:

header('Access-Control-Allow-Origin: *');
header("Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept");

echo json_encode($data);

The request is being sent via AngularJS list this:

app.controller('MainController', function($scope, $http) {

var req = {
    method: 'POST',
    url: 'http://testsite.com/api/login',
    headers: {
        'Content-Type': 'application/json'
    },
    data: { 
        Data : { 
            email: 'test',
        }
    }
}

$http(req)
    .success(function(response){ console.log(response); })
    .error(function(){ console.log("error")});
});

This works perfectly. The problem starts when I run this within an NodeJS app, everything is exactly the same except that the NodeJS with ExpressJS is running node bin/www. The error I get is:

Failed to load resource: the server responded with a status of 405 (Method Not Allowed)
Failed to load resource: Request header field Content-Type is not allowed by Access-Control-Allow-Headers
XMLHttpRequest cannot load http://testsite.com/api/login. Request header field Content-Type is not allowed by Access-Control-Allow-Headers

Any idea on what I could be missing?

Answer 1

Try adding this header in PHP server response

Access-Control-Allow-Methods: GET, POST

The client needs to know which methods the server can handle as part of the pre-flight request