Permissive CORS

Allows CORS for Node HTTP in the most permissive way.

Any specific headers or HTTP verbs requested by client calls via Access-Control-Request-Method or Access-Control-Request-Headers will be automatically added to the corresponding response headers. In other words, this middleware ALLOWS ALL THE THINGS.

Installation

npm install permissive-cors

Example

Example using Express:

var express = require('express');
var app = express();
 
var cors = require('permissive-cors');
app.use(cors());
 
app.put('/', function (req, res) {
  //...
});
app.delete('/', function (req, res) {
  //...
});

Example using Node HTTP:

var http = request('http');
var cors = require('permissive-cors');
var corsMiddleware = cors();
 
http.createServer(function (req, res) {
  corsMiddleware(req, res, function onDone() {
    // your code here
    res.end();
  });
});
 

Tests

Run npm test

Compatibility

Tested in Chrome 36, Safari 7 and Firefox 30. For any bugs found, feel free to submit a PR.