Feature request: allow CORS on local dev server

[wholladay]

1. OS? Mac OSX (El Capitan?)
2. Versions.
   angular-cli: 1.0.0-beta.1
   node: 5.10.0
   os: darwin x64
3. Repro steps. I'm running a Spring-Boot server as my RESTful API and to serve up the initial html page. The html page then gets the angular app from a CDN. The Angular cli server acts like the CDN while we are developing. Both Spring and Angular cli are running on my local machine (with different ports). When the call to System.import() is made, I get a CORS error from the browser.
4. The log given by the failure.
   XMLHttpRequest cannot load http://localhost:4200/system-config.js. No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://localhost:8080' is therefore not allowed access.
   zone.js:323 Error: Error: XHR error loading http://localhost:4200/system-config.js(…)
5. Mention any other details that might be useful.
   I'm sure there must be a way to do this, but I've tried everything I can think of.

[igorantolic]

+1 vote for enabling to set custom Access-Control-Allow-Origin parameter for ng serve

[machi1990]

To be able to make CORS http request I had to use the "--proxy" i.e ng server --proxy http://localhost:8080.

[wholladay]

I actually solved this issue by using the ember-cli-cors add on. All you have to do is install it using the ng command like so:
ng install ember-cli-cors

[igorantolic]

ng install ember-cli-cors
didnt help. What am I missing?

[Brocco]

@wholladay I presume that you meant:

npm install ember-cli-cors

and not

ng install ember-cli-cors?

@cotomas can you please try using npm install?

[wholladay]

@Brocco No, I first tried npm install ember-cli-cors and that did not work. When I ran ng install ember-cli-cors it did the trick for me.

+1

@wholladay did you configure anything after ng install ember-cli-cors ?
Or change the ng serve command at all?

It looks like all that did was install the npm package in package.json devDependencies for "ember-cli-cors". How does ng serve know about it after it is installed?

In my scenario I am trying to port an Angular 1 app where in Dev we had to run "C:\..\chrome.exe" --disable-web-security to access a SharePoint oData source. We also have to login to SharePoint first to get authenticated. Eventually the app is deployed to SharePoint and all that is no longer an issue. It used to work in Angular 1, would be nice to have it with angular-cli as well.

[maxailloud]

I tried ng install ember-cli-corsand nothing changed for me.
Is there an additional step to do to make it work?

[wholladay]

@jmb-mage I did not configure anything differently that I can remember, not did I change the ng serve command. It just kind of... well, started working and I moved on to other issues.

@wholladay as a workaround I ran the npm http-server onto the public or dist folder directly.

It has these attributes:

http-server -o --cors

[filipesilva]

Superseded by #2872, as this was for a pre-webpack version of the CLI.