{"action":"opened","issue":{"url":"https://api.github.com/repos/jsforce/jsforce/issues/189","labels_url":"https://api.github.com/repos/jsforce/jsforce/issues/189/labels{/name}","comments_url":"https://api.github.com/repos/jsforce/jsforce/issues/189/comments","events_url":"https://api.github.com/repos/jsforce/jsforce/issues/189/events","html_url":"https://github.com/jsforce/jsforce/issues/189","id":60570760,"number":189,"title":"CORS Support?","user":{"login":"shawn-edgespring","id":3269733,"avatar_url":"https://avatars.githubusercontent.com/u/3269733?v=3","gravatar_id":"","url":"https://api.github.com/users/shawn-edgespring","html_url":"https://github.com/shawn-edgespring","followers_url":"https://api.github.com/users/shawn-edgespring/followers","following_url":"https://api.github.com/users/shawn-edgespring/following{/other_user}","gists_url":"https://api.github.com/users/shawn-edgespring/gists{/gist_id}","starred_url":"https://api.github.com/users/shawn-edgespring/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/shawn-edgespring/subscriptions","organizations_url":"https://api.github.com/users/shawn-edgespring/orgs","repos_url":"https://api.github.com/users/shawn-edgespring/repos","events_url":"https://api.github.com/users/shawn-edgespring/events{/privacy}","received_events_url":"https://api.github.com/users/shawn-edgespring/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-03-10T21:15:40Z","updated_at":"2015-03-10T21:15:40Z","closed_at":null,"body":"Is CORS supported for general API calls in JSForce 1.4.1? I'm getting:\r\n\r\nXMLHttpRequest cannot load https://(mydomain).salesforce.com/services/data/v33.0. No 'Access-Control-Allow-Origin' header is present on the requested resource.\r\n\r\nThis is for the \"GET\" request. The preflight \"OPTIONS\" request succeeds with the appropriate headers:\r\n\r\nAccess-Control-Allow-Credentials: false\r\nAccess-Control-Allow-Headers: accept,authorization\r\nAccess-Control-Allow-Methods: HEAD, GET, POST, PUT, PATCH, DELETE\r\nAccess-Control-Allow-Origin: https://(myOrigin)\r\n\r\nI'm using OAuth2 and the auth header for GET is being set correctly:\r\n\r\nAuthorization: Bearer 00DT0000000Dpvc!AQYAQKG.7...\r\n\r\nAny ideas?"}}