CORS Proxy

This simple Node.js-based proxy allows your JavaScript application to call services that are hosted on a different domain and that don't support CORS.

Because the proxy is itself CORS-enabled, your application and the proxy don't have to be hosted on the same domain.

This proxy was tested with the Salesforce.com REST API, but it should work with other services as well.

Installation

There are different options to get your own instance of the CORS proxy up and running:

Deploy to Heroku (easiest): click the 'Deploy to Heroku' button at the top of this page
Install a local version
- Clone this repository
- Install the server dependencies
```
npm install
```
- Start the server
```
node server
```

Usage

When making an API call using JavaScript (using XMLHTTPRequest, $.ajax, etc):

Substitute the actual service URL with the Proxy URL
Set the request method, query parameters, and body as usual
Set the actual service URL in a header named 'Target-Endpoint'
Send the request as usual

CORS Headers

The proxy allows all origins, methods, and headers. You probably want to lock this down in a production environment.

Other Headers

The proxy currently passes the "Authorization" header to the target endpoint. You can modify the proxy to pass additional headers (or all of them).

Other Implementations