サブドメインに API をセットアップしようとしています。このため、Web API の後に JavaScript API もセットアップしようとしています。
しかし、残念なことに、サーバーに接続しようとするとエラーが発生しますXMLHttpRequest()。
CORSを許可するために見つけたほぼすべての方法でサブドメインエクスプレスサーバーを設定しようとしましたが、それでも同じエラーです。
更新：
ファイルは次のとおりです。
app.js :
var express = require('express'),
http = require('http'),
path = require('path'),
fs = require('fs'),
app = express();
app.configure(function(){
app.set('port', process.env.PORT || 8080);
app.set('views', __dirname + '/views');
app.set('view engine', 'jade');
app.use(express.cookieParser('S5crET!'));
app.use(express.favicon());
app.use(express.logger('dev'));
app.use(express.bodyParser());
app.use(express.methodOverride());
app.use(app.router);
app.use(express.static(path.join(__dirname, 'public')));
app.use(express.vhost('localhost', require('./server/main.js').app));
app.use(express.vhost('api.localhost', require('./server/api.js').app));
});
http.createServer(app).listen(app.get('port'), function(){
console.log('Express server listening on http://localhost:' + app.get('port'));
});
api.js :
var express = require('express'),
fs = require('fs'),
check = require('validator').check,
sanitize = require('validator').sanitize,
mongojs = require('mongojs'),
db = mongojs('mycity', ['user', 'reset', 'ranking', 'entries']),
tool = require('../util/tool.js'),
app = express();
app.options('/login', function (req, res){
var uname, password;
res.header("Access-Control-Allow-Origin", "*");
//Escape user input and store in variables
if (req.body.inputUserName) {
uname = sanitize(req.body.inputUserName).xss();
uname = sanitize(uname).escape();
} else {
res.send(400, {"state": false, "reason": "username not set"});
return;
}
//Escape password
if (req.body.inputPassword) {
password = sanitize(req.body.inputPassword).xss();
password = sanitize(password).escape();
} else {
res.send(400, {"state": false, "reason": "password not set"});
return;}
//Search user with given username
db.user.findOne({'username': uname}, function(err, data){
//Error during db search
if (err) res.send(400, {"state": false, "reason": "Internal server error"});
else {
//Check if there is a response otherwise username not found
if (data) {
//Check if user is blocked
if (data.blocked ? data.blocked : false) {
res.send(200, {"state": false, "reason": "You are blocked from the system"});
} else {
//Checks if password is the same like in the db
if (data.password == password) {
//Creating content of token
var atoken = tool.randomString(25);
//Checking if acccess token should be for 7 days or just a session token
/* Not really needed in the API
if (req.body.inputCheckbox) {
//send cookie that lasts 7 days to user
res.cookie('token', atoken, {expires: new Date(Date.now() + 604800000) , httpOnly: true, signed: true});
} else {
//send session cookie to user
res.cookie('token', atoken, {maxage: null, httpOnly: true, signed: true});
}
*/
//Redirection to /
//res.redirect("/");
res.send(200, {"state": true, "atoken": atoken, "id": data._id});
//set user online, save his ip ,date of last login and token in db
db.user.update({'username': uname}, { $set: {atoken: atoken, online: true, ip: req.ip, date: new Date(), attempt: 0}});
} else {
//Get current attempts of login with false password
var attempt = data.attempt ? data.attempt : 0;
//if attempts are more than equals 5 the user gets blocked
if (attempt >= 5) {
res.send(200, "blocked");
//set user as blocked
db.user.update({'username': uname}, {$set: {blocked: true}});
return
}
//save attempts in db
db.user.update({'username': uname}, { $set: {'attempt': ++attempt}});
}
}
} else {
//No such username found in db
res.send(200, {"state": false, "reason": "No such username in the system"});
}
}
});
//res.render('index', { title: 'Express' });
});
app.post('/signup', function (req, res){
//Escape user input
var name = req.body.inputName ? sanitize(req.body.inputName).xss() : false;
name = sanitize(name).escape();
var email = req.body.inputEmail ? sanitize(req.body.inputEmail).xss() : false;
email = sanitize(email).escape();
var password = req.body.inputPassword ? sanitize(req.body.inputPassword).xss() : false;
password = sanitize(password).escape();
var password2 = req.body.inputPassword2 ? sanitize(req.body.inputPassword2).xss() : false;
password2 = sanitize(password2).escape();
//Check if userinput is set
if (!name) {res.send('name empty');return}
if (!email) {res.send('email empty');return}
if (!password) {res.send('password empty');return}
if (!password2) {res.send('password2 empty');return}
if (password != password2) {res.send('check pass');return}
//Save user data into db
db.user.save({username: name, email: email, password: password, confirmed: false}, function(err, data){
if (err) res.send(500, false);
if (data) {
res.send(200, true);
//send email to user for confirmation of email
} else res.send(200, false);
});
});
app.post('/forgot', function (req, res){
if (req.body.inputEmail) {
//Escape user input
var email = sanitize(req.body.inputEmail).xss();
email = sanitize(email).escape();
//Search after email in db
db.user.findOne({'email': email}, function (err, data){
if (err) { res.send(500, "Error"); return}
//If email found
if (data) {
//Random token will be created - uid ( User IDentification)
var rand = tool.randomString(20);
//Save the request in the DB
db.reset.save({'email': email, 'uid': rand, 'Date': new Date()}, function (err, data){
if (err) { res.send(500, "Error"); return }
if (data) {
res.send(200, true);
//send email to given email with link to reset with the uid
} else {
//In case of empty data
res.send(200, false);
}
});
} else {
// Response if mali not found
res.send(200, 'No such email in system');
}
});
} else {
//Else if user input email is not set
res.send(200, false);
}
});
app.get('/reset/:uid?', function (req, res){
var uid;
//Escape user input uid
if(req.params.uid){
uid = sanitize(req.params.uid).xss();
uid = sanitize(uid).escape();
} else {
res.send(200, 'uid empty');
return
}
//Search after uid in db
db.reset.findOne({uid: uid}, function (err, data){
if (err) { res.send(200, "Error"); return };
//If uid found in db
if (data) {
res.send(200, true);
//TODO: reset page
//Remove uid from db:
//db.reset.remove({uid: uid});
}
//If uid not found in db
else {
res.send(200, false);
}
});
});
app.get('/ranking/:limit?', function (req, res){
var limit = req.params.limit ? parseInt(req.params.limit) : 5;
console.log(limit);
db.ranking.find(null, {_id: 0}).limit(limit).sort({"points": -1}, function (err, data){
if (err) { res.send(500, "Error"); return}
if (data) {
res.send(200, data);
} else {
res.send(200, "ERROR");
}
});
});
app.get('/myCleanAPI.js', function (req, res){
fs.readFile(__dirname.concat('/../api/myCleanAPI.js'), function (err, data){
if (err) { res.send(500, "//Internal server error"); console.log(err); return}
if (data) {
res.contentType('text/javascript');
res.send(200, data);
}
});
});
app.get('/', function (req, res){
//console.log("API called");
//res.send(200, "ttt");
fs.readFile(__dirname.concat('/../api/index.html'), function (err, data){
if (err) { res.send(500, "//Internal server error"); console.log(err); return}
if (data) {
res.contentType('text/html');
res.send(200, data);
}
});
});
console.log('API is running');
exports.app = app;
およびmain.js :
var express = require("express"),
path = require('path'),
app = express();
app.configure(function(){
app.set('views', __dirname + '/../views');
app.set('view engine', 'jade');
app.use(express.cookieParser('S5cr5t!'));
app.use(express.favicon());
app.use(express.logger('dev'));
app.use(express.bodyParser());
app.use(express.methodOverride());
app.use(app.router);
app.use(express.static(path.join(__dirname, 'public')));
});
app.get('/', function (req, res){
res.render('index', { title: 'Express' });
});
app.get('/users', function (req, res){
res.send("respond with a resource");
});
console.log("Main server running");
exports.app = app;