我正在尝试发出 DELETE ajax 请求,但似乎无法使其工作。当我使用 POSTMAN 制作它时,它可以工作。这是我的代码:
这是我的请求,使用 jQuery 的 .ajax() 方法发出:
$.ajax({
url: imageUrl,
type: 'DELETE',
crossDomain: true
});
在服务器上,使用 Node.js + Express 构建的不同应用程序,我有:
app.use(function(req, res, next) {
res.header("Access-Control-Allow-Origin", "*");
res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept");
next();
});
最后,这些是我的请求、请求标头和响应标头:
Request
Request URL:http://original/request/url
Request Method:OPTIONS
Status Code:200 OK
Remote Address:75.126.137.93:80
请求标头
Accept:*
Accept-Encoding:gzip, deflate, sdch
Accept-Language:pt-BR,pt;q=0.8,en-US;q=0.6,en;q=0.4,es;q=0.2,gl;q=0.2
Access-Control-Request-Headers:
Access-Control-Request-Method:DELETE
Connection:keep-alive
Host:fs.bvodola.webfactional.com
Origin:http://localhost:3000
Referer:http://localhost:3000/landing/admin/add-page
User-Agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36
响应头
Access-Control-Allow-Headers:Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin:*
Allow:GET,HEAD,DELETE
Connection:keep-alive
Content-Length:15
Content-Type:text/html; charset=utf-8
Date:Sat, 03 Sep 2016 23:34:17 GMT
ETag:W/"f-W+bYAIA7Bs2GwQecFLp1SA"
Server:nginx
X-Powered-By:Express
并且在Console我得到以下信息:
XMLHttpRequest 无法加载http://原始/请求/url http://original/request/url。预检响应中的 Access-Control-Allow-Methods 不允许方法 DELETE。
我该如何解决这个问题?在一些 StackOverflow 问题上,我读到 Access-Control-Allow-Headers 必须与 Access-Control-Request-Headers 相同。但是当我尝试在 jQuery 请求上设置它时,我在控制台上看到以下内容:
拒绝设置不安全标头“Access-Control-Request-Headers”
关于可能出什么问题的任何想法吗?谢谢!
我查看了以下 StackOverflow 问题,但找不到答案:
- Access-Control-Allow-Methods 不允许 DELETE https://stackoverflow.com/questions/28990565/delete-is-not-allowed-by-access-control-allow-methods#
- 总是得到预检响应中 Access-Control-Allow-Methods 不允许的方法 DELETE https://stackoverflow.com/questions/36374247/always-got-method-delete-is-not-allowed-by-access-control-allow-methods-in-prefl
- 预检响应中的 Access-Control-Allow-Origin 不启用跨域访问 https://stackoverflow.com/questions/25630585/access-control-allow-origin-in-preflight-response-doesnt-enable-cross-domain-ac
- Access-Control-Allow-Headers 不允许请求标头字段 Access-Control-Allow-Headers https://stackoverflow.com/questions/25727306/request-header-field-access-control-allow-headers-is-not-allowed-by-access-contr