{"id":1205,"date":"2025-04-11T10:00:25","date_gmt":"2025-04-11T01:00:25","guid":{"rendered":"https:\/\/route-zero.com\/recruit\/route\/1205\/"},"modified":"2025-05-07T13:54:44","modified_gmt":"2025-05-07T04:54:44","slug":"1205","status":"publish","type":"route","link":"https:\/\/route-zero.com\/recruit\/route\/1205\/","title":{"rendered":"JavaScript\u3067CORS\u30a8\u30e9\u30fc\u304c\u51fa\u305f\u3068\u304d\u306e\u539f\u56e0\u3068\u5bfe\u51e6\u6cd5\u3092\u5fb9\u5e95\u89e3\u8aac"},"content":{"rendered":"
\n

CORS\u30a8\u30e9\u30fc\u3063\u3066\u306a\u306b\uff1f\u306a\u305c\u3053\u306e\u8a18\u4e8b\u304c\u5fc5\u8981\u306a\u306e\u304b<\/h2>\n

JavaScript\u3067\u5916\u90e8\u306eAPI\u3068\u9023\u643a\u3057\u3088\u3046\u3068\u3057\u305f\u3068\u304d\u3001\u6b21\u306e\u3088\u3046\u306a\u30a8\u30e9\u30fc\u3092\u898b\u305f\u3053\u3068\u304c\u3042\u308a\u307e\u305b\u3093\u304b\uff1f<\/p>\n

Access to fetch at 'https:\/\/api.example.com\/data'<\/span> from<\/span> origin 'http:\/\/localhost:3000'<\/span> has been blocked by<\/span> CORS policy<\/code><\/pre>\n
\u300cAPI\u306b\u30a2\u30af\u30bb\u30b9\u3057\u3088\u3046\u3068\u3057\u305f\u3060\u3051\u306a\u306e\u306b\u3001\u306a\u3093\u3067\u30d6\u30ed\u30c3\u30af\u3055\u308c\u308b\u306e\uff1f\u300d
\u300cCORS\u3063\u3066\u3088\u304f\u805e\u304f\u3051\u3069\u3001\u3069\u3046\u3059\u308c\u3070\u76f4\u305b\u308b\u306e\uff1f\u300d<\/p>\n
\u305d\u3093\u306a\u7591\u554f\u3084\u30e2\u30e4\u30e2\u30e4\u306b\u5fdc\u3048\u308b\u305f\u3081\u306b\u3001\u3053\u306e\u8a18\u4e8b\u3067\u306f\u300cCORS\u30a8\u30e9\u30fc\u306e\u610f\u5473\u30fb\u539f\u56e0\u30fb\u78ba\u8a8d\u30dd\u30a4\u30f3\u30c8\u30fb\u89e3\u6c7a\u65b9\u6cd5\u300d\u307e\u3067\u3001\u5b9f\u969b\u306e\u30b3\u30fc\u30c9\u4ed8\u304d\u3067<\/strong>\u308f\u304b\u308a\u3084\u3059\u304f\u89e3\u8aac\u3057\u307e\u3059\u3002<\/p>\n
\n
CORS\u306e\u57fa\u672c\u3068JavaScript\u3067\u306e\u30a8\u30e9\u30fc\u4f8b<\/h2>\n
CORS\u3092\u3056\u3063\u304f\u308a\u89e3\u8aac<\/h3>\n
CORS\uff08Cross-Origin Resource Sharing\uff09\u3068\u306f\u3001\u300c\u7570\u306a\u308b\u5834\u6240\u306b\u3042\u308bWeb\u30b5\u30fc\u30d3\u30b9\u3068\u306e\u3084\u308a\u3068\u308a\u3092\u3001\u5236\u9650\u4ed8\u304d\u3067\u8a31\u53ef\u3059\u308b\u4ed5\u7d44\u307f\u300d\u3067\u3059\u3002<\/p>\n
    \n
  • \n
    \u300c\u7570\u306a\u308b\u5834\u6240\u300d\uff1d\u30aa\u30ea\u30b8\u30f3\u304c\u7570\u306a\u308b<\/strong>\u3053\u3068\u3092\u6307\u3057\u307e\u3059\u3002
    \u203b\u30aa\u30ea\u30b8\u30f3\u3068\u306f\u3001\u300c\u30d7\u30ed\u30c8\u30b3\u30eb\uff08http\/https\uff09\u30fb\u30c9\u30e1\u30a4\u30f3\u540d\u30fb\u30dd\u30fc\u30c8\u756a\u53f7\u300d\u306e\u30bb\u30c3\u30c8\u306e\u3053\u3068\u3002<\/p>\n<\/li>\n<\/ul>\n
    \u305f\u3068\u3048\u3070\u3001\u3042\u306a\u305f\u306eWeb\u30a2\u30d7\u30ea\u304c\u300chttp:\/\/localhost:3000\u300d\u306b\u3042\u308a\u3001\u5916\u90e8API\u304c\u300chttps:\/\/api.example.com\u300d\u306b\u3042\u308b\u5834\u5408\u3001\u3053\u308c\u306f\u7570\u306a\u308b\u30aa\u30ea\u30b8\u30f3<\/strong>\u3067\u3059\u3002<\/p>\n
    Web\u30d6\u30e9\u30a6\u30b6\u306f\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306e\u305f\u3081\u306b\u300c\u9055\u3046\u30aa\u30ea\u30b8\u30f3\u304b\u3089\u306e\u30c7\u30fc\u30bf\u53d6\u5f97\u300d\u3092\u5236\u9650\u3057\u307e\u3059\u3002\u3053\u308c\u304cCORS\u30a8\u30e9\u30fc<\/strong>\u306e\u5143\u3067\u3059\u3002<\/p>\n
    \n
    \u5177\u4f53\u7684\u306aCORS\u30a8\u30e9\u30fc\u4f8b\u3068\u539f\u56e0<\/h3>\n
    \u4ee5\u4e0b\u306e\u3088\u3046\u306a\u30e1\u30c3\u30bb\u30fc\u30b8\u304c\u51fa\u305f\u5834\u5408\u3001\u305d\u308c\u306fCORS\u306b\u95a2\u9023\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n
    No 'Access-Control-Allow-Origin'<\/span> header is<\/span> present on<\/span> the requested resource.<\/code><\/pre>\n
    \u4e3b\u306aCORS\u30a8\u30e9\u30fc\u306e\u539f\u56e0<\/strong><\/p>\n
      \n
    1. \n
      \u30b5\u30fc\u30d0\u30fc\u304c\u8a31\u53ef\u3057\u3066\u3044\u306a\u3044<\/strong>
      API\u30b5\u30fc\u30d0\u30fc\u5074\u304c\u300c\u3069\u306e\u30aa\u30ea\u30b8\u30f3\uff08\u30a2\u30af\u30bb\u30b9\u5143\uff09\u3092\u8a31\u53ef\u3059\u308b\u304b\u300d\u3092\u30ec\u30b9\u30dd\u30f3\u30b9\u30d8\u30c3\u30c0\u30fc\u3067\u660e\u793a\u3057\u3066\u3044\u306a\u3044\u3068\u3001\u30d6\u30e9\u30a6\u30b6\u304c\u901a\u4fe1\u3092\u30d6\u30ed\u30c3\u30af\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n
    2. \n
      \u30d7\u30ea\u30d5\u30e9\u30a4\u30c8\u30ea\u30af\u30a8\u30b9\u30c8\u304c\u5931\u6557\u3057\u3066\u3044\u308b<\/strong>
      \u7279\u5b9a\u306e\u6761\u4ef6\uff08\u4f8b\uff1a\u30ab\u30b9\u30bf\u30e0\u30d8\u30c3\u30c0\u30fc\u4ed8\u304d\u306ePOST\uff09\u3067\u306f\u3001\u4e8b\u524d\u78ba\u8a8d\u306e\u305f\u3081\u306eOPTIONS\u30ea\u30af\u30a8\u30b9\u30c8<\/strong>\uff08\u30d7\u30ea\u30d5\u30e9\u30a4\u30c8\uff09\u304c\u9001\u3089\u308c\u307e\u3059\u3002\u3053\u306e\u30ea\u30af\u30a8\u30b9\u30c8\u306b\u5bfe\u3057\u3066\u30b5\u30fc\u30d0\u30fc\u304c\u6b63\u3057\u304f\u5fdc\u7b54\u3057\u306a\u3044\u3068\u3001\u5b9f\u969b\u306e\u901a\u4fe1\u3082\u62d2\u5426\u3055\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n
    3. \n
      \u8a8d\u8a3c\u60c5\u5831\u4ed8\u304d\u30ea\u30af\u30a8\u30b9\u30c8\u306e\u5236\u9650<\/strong>
      \u30af\u30c3\u30ad\u30fc\u3084\u30c8\u30fc\u30af\u30f3\u3092\u542b\u3080\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u9001\u4fe1\u3059\u308b\u5834\u5408\u3001credentials: ‘include’ \u306a\u3069\u306e\u8a2d\u5b9a\u304c\u5fc5\u8981\u3067\u3059\u3002\u3055\u3089\u306b\u30b5\u30fc\u30d0\u30fc\u5074\u3067\u3082 Access-Control-Allow-Credentials: true \u306e\u8a2d\u5b9a\u304c\u5fc5\u8981\u3067\u3059\u3002<\/p>\n<\/li>\n
    4. \n
      \u30aa\u30ea\u30b8\u30f3\u304c\u4e00\u81f4\u3057\u3066\u3044\u306a\u3044<\/strong>
      \u30ea\u30af\u30a8\u30b9\u30c8\u3092\u9001\u308b\u5143\u306eURL\u3068\u3001API\u306eURL\u306e\u30c9\u30e1\u30a4\u30f3\u30fb\u30dd\u30fc\u30c8\u30fb\u30d7\u30ed\u30c8\u30b3\u30eb<\/strong>\u304c1\u3064\u3067\u3082\u7570\u306a\u308b\u3068\u3001\u30aa\u30ea\u30b8\u30f3\u304c\u7570\u306a\u308b\u3068\u5224\u65ad\u3055\u308c\u307e\u3059\u3002\u3053\u308c\u304cCORS\u30c1\u30a7\u30c3\u30af\u306e\u5bfe\u8c61\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n
      \n
      \u5bfe\u51e6\u6cd5\u3068\u30b3\u30fc\u30c9\u4f8b<\/h2>\n
      ✅\u65b9\u6cd51\uff1a\u30b5\u30fc\u30d0\u30fc\u5074\u3067\u300c\u8a31\u53ef\u300d\u3092\u660e\u793a\u3059\u308b<\/h3>\n
      \u6700\u3082\u78ba\u5b9f\u306a\u306e\u306fAPI\u306e\u30b5\u30fc\u30d0\u30fc\u5074\u3067\u300c\u3053\u306e\u30b5\u30a4\u30c8\u304b\u3089\u306e\u30a2\u30af\u30bb\u30b9\u3092\u8a31\u53ef\u3057\u307e\u3059\u300d\u3068\u8a2d\u5b9a\u3059\u308b\u3053\u3068<\/strong>\u3067\u3059\u3002<\/p>\n
      Node.js\uff08Express\uff09\u306e\u5834\u5408\uff1a<\/p>\n
      const<\/span> express = require<\/span>('express'<\/span>);\r\nconst<\/span> app = express();\r\n\r\napp.use((req, res, next<\/span>) =><\/span> {\r\n  res.header('Access-Control-Allow-Origin'<\/span>, 'http:\/\/localhost:3000'<\/span>); \/\/ \u8a31\u53ef\u3057\u305f\u3044URL<\/span>\r\n  res.header('Access-Control-Allow-Methods'<\/span>, 'GET, POST, PUT, DELETE'<\/span>);\r\n  res.header('Access-Control-Allow-Headers'<\/span>, 'Content-Type'<\/span>);\r\n  next();\r\n});\r\n\r\napp.get('\/api\/data'<\/span>, (req, res<\/span>) =><\/span> {\r\n  res.json({ message: '\u30c7\u30fc\u30bf\u53d6\u5f97\u6210\u529f'<\/span> });\r\n});<\/code><\/pre>\n
      \u88dc\u8db3<\/strong>\uff1a<\/p>\n