js 跨域访问cookie

var xhr = new XMLHttpRequest();
xhr.open('GET', 'https://example.com/api/data', true);
xhr.withCredentials = true; // 允许携带Cookie
xhr.send();

Access-Control-Allow-Origin: https://yourdomain.com
Access-Control-Allow-Credentials: true

const express = require('express');
const app = express();

app.use((req, res, next) => {
  res.header('Access-Control-Allow-Origin', 'https://yourdomain.com');
  res.header('Access-Control-Allow-Credentials', 'true');
  res.header('Access-Control-Allow-Methods', 'GET, POST, PUT, DELETE, OPTIONS');
  res.header('Access-Control-Allow-Headers', 'Origin, X-Requested-With, Content-Type, Accept');
  next();
});

app.get('/api/data', (req, res) => {
  res.json({ message: 'This is data from the server.' });
});

app.listen(3000, () => {
  console.log('Server running on port 3000');
});