reactjs - Can’t access cross-origin response header from frontend JavaScript - Stack Overflow

admin管理员组

文章数量:1344107

I am building a simple web app using ReactJS and create-react-app.

I have a backend API set up on Heroku where I can make POST requests. Everything works fine, except:

When I make a POST request using fetch API, the response is 100% correct but it only gives me 2 standard headers. I want to get my custom header. I have added expose header in my response and here's the plot twist: When I view the headers from Chrome Inspection Tool or Postman (API tool), it shows all the headers, including my custom one. Here is the fetch code I'm using -

fetch(theUrl, {
  method: 'POST',
  body: JSON.stringify({
    "placeholder": "placeholder"
  })
})
.then(function(res) {
  console.log(res.headers.get('CUSTOM_HEADER_NAME'));
})

If it makes any difference, this fetch method is called from a function outside the main body of the ReactJS ponent.

The name of the custom header is Image-Identification-Path, and the header in my response header is Access-Control-Expose-Headers for Image-Identification-Path.

Summary: How do I get my custom header using fetch?

I am building a simple web app using ReactJS and create-react-app.

I have a backend API set up on Heroku where I can make POST requests. Everything works fine, except:

When I make a POST request using fetch API, the response is 100% correct but it only gives me 2 standard headers. I want to get my custom header. I have added expose header in my response and here's the plot twist: When I view the headers from Chrome Inspection Tool or Postman (API tool), it shows all the headers, including my custom one. Here is the fetch code I'm using -

fetch(theUrl, {
  method: 'POST',
  body: JSON.stringify({
    "placeholder": "placeholder"
  })
})
.then(function(res) {
  console.log(res.headers.get('CUSTOM_HEADER_NAME'));
})

If it makes any difference, this fetch method is called from a function outside the main body of the ReactJS ponent.

The name of the custom header is Image-Identification-Path, and the header in my response header is Access-Control-Expose-Headers for Image-Identification-Path.

Summary: How do I get my custom header using fetch?

• javascript
• reactjs
• cors
• http-headers
• fetch-api

Share Improve this question Follow edited Jul 14, 2020 at 7:41 sideshowbarker♦ 88.5k3030 gold badges215215 silver badges212212 bronze badges asked Apr 3, 2017 at 2:33 FahmidFahmid 18033 silver badges1515 bronze badges 3

• Is this a cross-origin request? When you say “I have added expose header in my response”, you mean you have added the name of the custom header to the value of the Access-Control-Expose-Headers response header? – sideshowbarker ♦ Commented Apr 3, 2017 at 2:36
• Yes, it's a cross-origin request. I'm running my app on localhost right now. I tested this out by uploading my app on Heroku too, but it gives the same result. Also yes, I have added the name of the custom header to the value of the Access-Control-Expose-Headers response header. – Fahmid Commented Apr 3, 2017 at 2:58
• Your screen shot shows you have the Image-Identification-Path header name in the value of the Access-Control-Allow-Headers header. You need to have it set in the value of the Access-Control-Expose-Headers header. (Access-Control-Allow-Headers is for listing custom request header names.) – sideshowbarker ♦ Commented Apr 3, 2017 at 4:14

Add a ment  | 

2 Answers 2

Sorted by: Reset to default 11

You must configure the server to which the request is sent, such that its response has an Access-Control-Expose-Headers header that has the name of your custom response header.

Otherwise, if your browser doesn’t see the name of your custom header in that Access-Control-Expose-Headers header, it won’t let you access the value of your custom header.

In such a case it’s expected that you’d still be able to see the custom header if you look at the response in Postman or even in your browser devtools.

But just because the browser gets the custom header in the response doesn’t mean the browser will expose it to your frontend JavaScript code.

For cross-origin requests, browsers will only expose that custom response header to your frontend code if that header name is in the Access-Control-Expose-Headers value.

I know this question is old but I ran into this problem yesterday, and the given answer didn't work for me.

The solution I found was given in this article. Basically:

You can’t directly access the headers on the response to a fetch call - you have to iterate through after using the entries() method on the headers.

So, in your particular case you should be able to achieve the goal by using this code:

fetch(theUrl, {
  method: 'POST',
  body: JSON.stringify({
    "placeholder": "placeholder"
  })
})
.then(response => { 
  for (var pair of response.headers.entries()) { // accessing the entries
     if (pair[0] === 'CUSTOM_HEADER_NAME') { // key you're looking for, in your case Image-Identification-Path
        let imagePath = pair[1]; //// saving that value
     }
  }
  .... })

本文标签： reactjsCan’t access crossorigin response header from frontend JavaScriptStack Overflow