<\/div>\n

Merhaba,<\/p>\n

Node.js temelli geli\u015ftirilen bir sunucunun API’lar\u0131n\u0131 kullanabilmek i\u00e7in varsay\u0131lan ‘Access-Control-Allow-Origin’ g\u00fcvenli\u011fini a\u015fabilmemiz gerekmektedir. Sunucu taraf\u0131ndan hangi adreslerin API’lara eri\u015febilece\u011fini ayarlamal\u0131 ve bu do\u011frultuda eri\u015fim politikalar\u0131n\u0131 belirlemeliyiz.<\/p>\n

Cors ayarlamas\u0131 yap\u0131lmayan bir sunucuya yap\u0131lan talep neticesinde g\u00fcvenlik gere\u011fi do\u011fal refleks devreye girecek ve a\u015fa\u011f\u0131daki hata mesaj\u0131 f\u0131rlat\u0131lacakt\u0131r.<\/p>\n

Access to XMLHttpRequest at ‘http:\/\/localhost:5000\/xyz’ from origin ‘http:\/\/xyz.com’ has been blocked by CORS policy: Response to preflight request doesn’t pass access control check: No ‘Access-Control-Allow-Origin’ header is present on the requested resource.<\/strong><\/em><\/span><\/p><\/blockquote>\n

\u0130lgili hatadan kurtulabilmek ve sunucunun API’lar\u0131n\u0131 s\u0131k\u0131nt\u0131s\u0131z kullanabilmek i\u00e7in\u00a0\u00f6zel olarak tasarlanan cors<\/a> middleware’\u0131n\u0131 kullanabiliriz.<\/p>\n

\r\nnpm install cors --save\r\n<\/pre>\nPaketi sunucuya install ettikten sonra a\u015fa\u011f\u0131daki gibi middleware olarak uygulamaya eklememiz, d\u0131\u015far\u0131dan herhangi bir adres \u00fczerinden gelecek t\u00fcm talepler i\u00e7in g\u00fcvenli\u011fin kald\u0131r\u0131ld\u0131\u011f\u0131 anlam\u0131na gelmekte ve s\u0131k\u0131nt\u0131s\u0131z bir \u015fekilde gelen t\u00fcm taleplerin i\u015flenece\u011fi belirtilmektedir.<\/p>\n
\r\n\/\/Modul Variables\r\nconst express = require("express");\r\nconst app = express();\r\nvar cors = require("cors")\r\n\r\napp.use(cors());\r\n\r\n\/\/Router Variables\r\nconst employeeRouter = require(".\/routers\/employeeRouter");\r\nconst tokenRouter = require(".\/routers\/tokenRouter");\r\nconst userRouter = require(".\/routers\/userRouter");\r\nconst orderRouter = require(".\/routers\/orderRouter");\r\n\r\n\/\/Routers\r\napp.use("\/", employeeRouter);\r\napp.use("\/token", tokenRouter);\r\napp.use("\/user", userRouter);\r\napp.use("\/order", orderRouter);\r\n\r\napp.listen(5000, () => console.log("Yay\u0131n ba\u015flad\u0131..."));\r\n<\/pre>\nAyriyetten a\u015fa\u011f\u0131daki gibi bir kullan\u0131m ile de belli bir route’a \u00f6zel cors ayarlamas\u0131 yap\u0131labilmektedir.<\/p>\n
\r\n\/\/Modul Variables\r\nconst express = require("express");\r\nconst app = express();\r\nvar cors = require("cors")\r\n\r\napp.get("\/page1", cors(), (request, response, next) => {\r\n     response.json("...");\r\n});\r\n\r\napp.get("\/page2", (request, response, next) => {\r\n     response.json("...");\r\n});\r\n.\r\n.\r\n.\r\n<\/pre>\nSunucu API’lar\u0131n\u0131 kullanacak kaynak adresi direkt olarak konfigure edebilmek i\u00e7in a\u015fa\u011f\u0131daki gibi i\u015flem uygulayabiliriz.<\/p>\n
\r\n\/\/Modul Variables\r\nconst express = require("express");\r\nconst app = express();\r\nvar cors = require("cors")\r\n\r\nvar corsOptions = {\r\n     origin: 'http:\/\/localhost:4200',\r\n     optionsSuccessStatus: 200\r\n}\r\n\r\napp.get("\/page1", cors(corsOptions), (request, response, next) => {\r\n     response.json("...");\r\n});\r\n.\r\n.\r\n.\r\n<\/pre>\nBurada “\/page1” route’unu, sade ve sadece “http:\/\/localhost:4200” adresinden gelecek talepler neticesinde tetikleyecektir. Bu adres d\u0131\u015f\u0131ndaki t\u00fcm talepler ‘Access-Control-Allow-Origin’ hatas\u0131yla kar\u015f\u0131la\u015facakt\u0131r.<\/p>\n
E\u011fer ki, birden fazla adresi konfigure etmek istiyorsan\u0131z a\u015fa\u011f\u0131daki gibi bir whitelist tan\u0131mlamas\u0131 \u00fczerinden i\u015flemlerinizi ger\u00e7ekle\u015ftirebilirsiniz.<\/p>\n
\r\n\/\/Modul Variables\r\nconst express = require("express");\r\nconst app = express();\r\nvar cors = require("cors")\r\n\r\nvar whitelist = ['http:\/\/localhost:4200', 'http:\/\/localhost:4201']\r\nvar corsOptions = {\r\n     origin: (origin, callback) => {\r\n          if (whitelist.indexOf(origin) !== -1)\r\n               callback(null, true);\r\n          else\r\n               callback(new Error("! ! !"));\r\n     }\r\n}\r\n\r\napp.get("\/page1", cors(corsOptions), (request, response, next) => {\r\n     response.json("...");\r\n});\r\n.\r\n.\r\n.\r\n<\/pre>\nEvet, g\u00f6rd\u00fc\u011f\u00fcn\u00fcz \u00fczere “cors” paketi sayesinde Node.js serverlar\u0131ndaki ‘Access-Control-Allow-Origin’ hatas\u0131ndan kurtulunabilmekte ve belirlenen adreslere API eri\u015fim konfig\u00fcrasyonu sa\u011flanabilmektedir.<\/p>\n
\u0130lgilenenlerin faydalanmas\u0131 dile\u011fiyle…
\nSonraki yaz\u0131lar\u0131mda g\u00f6r\u00fc\u015fmek \u00fczere…<\/p>\n
\u0130yi \u00e7al\u0131\u015fmalar…<\/p>\n","protected":false},"excerpt":{"rendered":"
Merhaba, Node.js temelli geli\u015ftirilen bir sunucunun API’lar\u0131n\u0131 kullanabilmek i\u00e7in varsay\u0131lan ‘Access-Control-Allow-Origin’ g\u00fcvenli\u011fini a\u015fabilmemiz gerekmektedir. Sunucu taraf\u0131ndan hangi adreslerin API’lara eri\u015febilece\u011fini ayarlamal\u0131 ve bu do\u011frultuda eri\u015fim politikalar\u0131n\u0131 belirlemeliyiz. Cors ayarlamas\u0131 yap\u0131lmayan bir sunucuya yap\u0131lan talep...<\/p>\n","protected":false},"author":1,"featured_media":8600,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2145],"tags":[2235,2236,2147,2707,2708],"class_list":["post-9969","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-node-js","tag-access-control-allow-origin","tag-cors","tag-node-js","tag-node-js-access-control-allow-origin","tag-node-js-cors"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts\/9969","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/comments?post=9969"}],"version-history":[{"count":16,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts\/9969\/revisions"}],"predecessor-version":[{"id":9985,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts\/9969\/revisions\/9985"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/media\/8600"}],"wp:attachment":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/media?parent=9969"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/categories?post=9969"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/tags?post=9969"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}