download eBook CORS in Action: Creating and consuming cross-origin APIs By Monsur Hossain –

Summary CORS in Action introduces Cross Origin Resource Sharing CORS from both the server and the client perspective It starts with the basics how to make CORS requests and how to implement CORS on the server It then explores key details such as performance, debugging, and security API authors will learn how CORS opens their APIs to a wider range of users JavaScript developers will find valuable techniques for building rich web apps that can take advantage of APIs hosted anywhere The techniques described in this book are especially applicable to mobile environments, where browsers are guaranteed to support CORS Purchase of the print book includes a free eBook in PDF, Kindle, and ePub formats from Manning Publications About the BookSuppose you need to share some JSON data with another application or service If everything is hosted on one domain, it s a snap But if the data is on another domain, the browser s same origin policy stops you cold CORS is a new web standard that enables safe cross domain access without complex server side code Mastering CORS makes it possible for web and mobile applications to share data simply and securelyCORS in Action introduces CORS from both the server and the client perspective It starts with making and enabling CORS requests and then explores performance, debugging, and security You ll learn to build apps that can take advantage of APIs hosted anywhere and how to write APIs that expand your products to a wider range of users For web developers comfortable with JavaScript No experience with CORS is assumedWhat s InsideCORS from the ground upServing and consuming cross domain dataBest practices for building CORS APIsWhen to use CORS alternatives like JSON P and proxiesAbout the AuthorMonsur Hossain is an engineer at Google who has worked on API related projects such as the Google JavaScript Client, the APIs Discovery Service, and CORS support for Google APIsTable of ContentsPARTINTRODUCING CORSThe Core of CORSMaking CORS requestsPARTCORS ON THE SERVERHandling CORS requestsHandling preflight requestsCookies and response headersBest practicesPARTDEBUGGING CORS REQUESTSDebugging CORS requests APPENDIXESCORS referenceConfiguring your environmentWhat is CSRF Other cross origin techniques