You want to have your JavaScript application access a remote API but that remote API does not have CORS headers. What to do?
Instead of pointing to that remote API, point to a location on an Apache server that you have control of, have it connect to that remote API for you, and also add the CORS headers so JavaScript is happy.
Apache can proxy, or hand off the API request for you while also injecting the CORS header Access-Control-Allow-Origin to that remote API response.
Requirements:
Apache mod_proxy
Apache mod_headers
<LocationMatch "/api">
ProxyPass http://remote-server.com:8000/api/
Header add "Access-Control-Allow-Origin" "*"
</LocationMatch>
Now instead of pointing my JavaScript to http://remote-server.com:8000/api/, I point it to my Apache server at /api/ and that will serve the data from http://remote-server.com:8000/api/ with the CORS header.
http://enable-cors.org/server_apache.html
If you are using mod_rewrite along with this, you might need the [P] flag which tells mod_rewrite to handle the request with mod_proxy.
Leave a Reply