Build HTTP APIs with routing, middleware, validation, controllers, and error handling.
Lessons
Allow cross-origin browser requests safely with the cors middleware.
CORS in Express is easiest to learn by reading the example, changing it, and observing the result.
import express from 'express';
import cors from 'cors';
const app = express();
app.use(cors({
origin: ['https://app.example.com'],
methods: ['GET', 'POST', 'PUT', 'DELETE'],
credentials: true
}));
app.get('/api/lessons', (req, res) => res.json({ ok: true }));
app.listen(3000);Practice the CORS in Express example in a small scratch file, then explain what changed and why.