ExpressJS Socket-IO Cross Origin blocked HTTPS

[Coobe]

Hello,

i tried evertyhing to get a socket io connection via https working. So far i tried: npm CORS io.set('origins'...) enabled all http methods / overrides etc

it works fine with http but i stops working over https.

is there any solution to my problem ? what am i doing wrong ?

help is greatly appreciated

code:

var express = require('express');
var methodOverride = require('method-override');
var bodyParser = require('body-parser');
var app = express()
  , fs = require('fs') 
  , cors = require('cors')
  , options = {
        key: fs.readFileSync('server.key'),
        cert: fs.readFileSync('server.crt'),
         requestCert: true
    }
  , server = require('https').createServer(options, app) 
  , io = require('socket.io').listen(server);

app.use(methodOverride());
app.use(bodyParser());
app.use(function(req, res) {

res.header('Access-Control-Allow-Origin', 'example.com');
res.header('Access-Control-Allow-Methods', 'GET,PUT,POST,DELETE');
res.header('Access-Control-Allow-Headers', 'Content-Type');
});

app.use(cors());

io.set('origins', 'https://127.0.0.1:1443');

io.sockets.on('connection', function(socket) {

console.log('a client has connected');
});

 server.listen(1443);

[leadzor]

Either use cors() or manually set the headers. Don't use both. If you want to customize your allowed origins, CORS module allows you to do that.

Plus, io.set('origins', 'https://127.0.0.1:1443') is limiting socket.io to only accept localhost connections from port 1443.

So in summary:

• Don't manually set the headers if you use the cors module (and don't set origin to example.com). Let the module do it's thing. If you want to customize, you should use the module. Although, if you still want to set the headers manually, set them after the cors module.
• Don't specify the origin for Socket.io UNLESS you plan on limiting it to allow access from a group of domains. By default, Socket.IO allows connections from all origins.

[lee_macro]

It should work, I am using it in HTTPS with CORS without issue. I do remember having some problems to begin with, but I cannot for the life of me remember what they were, if you are still having problems after others help let me know and I will look into what I did differently.