bennadel · February 10, 2012 16:16 · Feb 10, 2012
diff --git a/demo.htm b/demo.htm
@@ -0,0 +1,111 @@
+<!DOCTYPE html>
+<html>
+<head>
+	<title>Cross-Origin Resource Sharing (CORS) With jQuery And Node.js</title>
+</head>
+<body>
+
+	<h1>
+		Cross-Origin Resource Sharing (CORS) With jQuery And Node.js
+	</h1>
+
+
+	<h2>
+		PUT Response
+	</h2>
+
+	<pre id="putResponse">
+		<!-- To be populated dynamically. -->
+	</pre>
+
+
+	<h2>
+		DELETE Response
+	</h2>
+
+	<pre id="deleteResponse">
+		<!-- To be populated dynamically. -->
+	</pre>
+
+
+
+	<!-- Load our JavaScript and make some CORS requests. -->
+	<script type="text/javascript" src="../jquery-1.7.1.js"></script>
+	<script type="text/javascript">
+
+
+		// Wrap up the PUT request execution.
+		var makePUTRequest = function(){
+
+			// Make the PUT request.
+			$.ajax({
+				type: "PUT",
+				url: "http://localhost:8080/some/url/resource/path",
+				contentType: "application/json",
+				data: JSON.stringify({
+					name: "Tricia",
+					age: 37
+				}),
+				dataType: "text",
+				success: function( response ){
+
+					// Put the plain text in the PRE tag.
+					$( "#putResponse" ).text( response );
+
+				},
+				error: function( error ){
+
+					// Log any error.
+					console.log( "ERROR:", error );
+
+				},
+				complete: function(){
+
+					// When this completes, execute teh
+					// DELETE request.
+					makeDELETERequest();
+
+				}
+			});
+
+		};
+
+
+		// Wrap up the DELETE request execution so it can easily be
+		// invoked from the end of the PUT delete response.
+		var makeDELETERequest = function(){
+
+			// Make the DELETE request.
+			$.ajax({
+				type: "DELETE",
+				url: "http://localhost:8080/some/url/resource/path",
+				contentType: "application/json",
+				data: JSON.stringify({
+					name: "Tricia",
+					age: 37
+				}),
+				dataType: "text",
+				success: function( response ){
+
+					// Put the plain text in the PRE tag.
+					$( "#deleteResponse" ).text( response );
+
+				},
+				error: function( error ){
+
+					// Log any error.
+					console.log( "ERROR:", error );
+
+				}
+			});
+
+		};
+
+
+		// Execute the PUT request.
+		makePUTRequest();
+
+
+	</script>
+</body>
+</html>
diff --git a/server.js b/server.js
@@ -0,0 +1,126 @@
+// Include our HTTP module.
+var http = require( "http" );
+
+
+// Create an HTTP server so that we can listen for, and respond to
+// incoming HTTP requests. This requires a callback that can be used
+// to handle each incoming request.
+var server = http.createServer(
+	function( request, response ){
+
+
+		// When dealing with CORS (Cross-Origin Resource Sharing)
+		// requests, the client should pass-through its origin (the
+		// requesting domain). We should either echo that or use *
+		// if the origin was not passed.
+		var origin = (request.headers.origin || "*");
+
+
+		// Check to see if this is a security check by the browser to
+		// test the availability of the API for the client. If the
+		// method is OPTIONS, the browser is check to see to see what
+		// HTTP methods (and properties) have been granted to the
+		// client.
+		if (request.method.toUpperCase() === "OPTIONS"){
+
+
+			// Echo back the Origin (calling domain) so that the
+			// client is granted access to make subsequent requests
+			// to the API.
+			response.writeHead(
+				"204",
+				"No Content",
+				{
+					"access-control-allow-origin": origin,
+					"access-control-allow-methods": "GET, POST, PUT, DELETE, OPTIONS",
+					"access-control-allow-headers": "content-type, accept",
+					"access-control-max-age": 10, // Seconds.
+					"content-length": 0
+				}
+			);
+
+			// End the response - we're not sending back any content.
+			return( response.end() );
+
+
+		}
+
+
+		// -------------------------------------------------- //
+		// -------------------------------------------------- //
+
+
+		// If we've gotten this far then the incoming request is for
+		// our API. For this demo, we'll simply be grabbing the
+		// request body and echoing it back to the client.
+
+
+		// Create a variable to hold our incoming body. It may be
+		// sent in chunks, so we'll need to build it up and then
+		// use it once the request has been closed.
+		var requestBodyBuffer = [];
+
+		// Now, bind do the data chunks of the request. Since we are
+		// in an event-loop (JavaScript), we can be confident that
+		// none of these events have fired yet (??I think??).
+		request.on(
+			"data",
+			function( chunk ){
+
+				// Build up our buffer. This chunk of data has
+				// already been decoded and turned into a string.
+				requestBodyBuffer.push( chunk );
+
+			}
+		);
+
+
+		// Once all of the request data has been posted to the
+		// server, the request triggers an End event. At this point,
+		// we'll know that our body buffer is full.
+		request.on(
+			"end",
+			function(){
+
+				// Flatten our body buffer to get the request content.
+				var requestBody = requestBodyBuffer.join( "" );
+
+				// Create a response body to echo back the incoming
+				// request.
+				var responseBody = (
+					"Thank You For The Cross-Domain AJAX Request:\n\n" +
+					"Method: " + request.method + "\n\n" +
+					requestBody
+				);
+
+				// Send the headers back. Notice that even though we
+				// had our OPTIONS request at the top, we still need
+				// echo back the ORIGIN in order for the request to
+				// be processed on the client.
+				response.writeHead(
+					"200",
+					"OK",
+					{
+						"access-control-allow-origin": origin,
+						"content-type": "text/plain",
+						"content-length": responseBody.length
+					}
+				);
+
+				// Close out the response.
+				return( response.end( responseBody ) );
+
+			}
+		);
+
+
+	}
+);
+
+
+// Bind the server to port 8080.
+server.listen( 8080 );
+
+
+// Debugging:
+console.log( "Node.js listening on port 8080" );