Axios 和推特 API [英] Axios and twitter API

问题描述

我在使用 axios 和 twitter API 时遇到了问题.

I'm having an issue with axios and twitter API.

我使用 Postman 发出了成功的请求(设置了授权标头 - OAuth 1.0).现在我正在尝试做同样的事情，我得到的只是:

I made successful request using Postman (with Authorization header set - OAuth 1.0). Now I'm trying to do the same and all I get is:

Failed to load https://api.twitter.com/1.1/lists/statuses.json: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://localhost:3000' is therefore not allowed access. The response had HTTP status code 400.

我还在 Network chrome 选项卡中看到，只有 OPTIONS 正在发送.

I also see in the Network chrome tab, that only the OPTIONS is being sent.

这是我的 axios 配置的样子(更改凭据；)):

This is how my axios configuration looks like (with changed credentials ;)):

const api = axios.create({
    baseURL: 'https://api.twitter.com/1.1',
    headers: {
      // Authorization was copied from the Postman headers
      Authorization: 'OAuth oauth_consumer_key="consumer_key",oauth_token="token",,oauth_signature_method="H,MAC-SHA1",,oauth_timestamp="1,515677408",,oauth_nonce="nonce",,oauth_version="1,.0",,oauth_signature="signature"',
    },
    withCredentials: true,
  });

  const getListStatuses = (owner_screen_name, slug) => {
    return api.get('/lists/statuses.json', { owner_screen_name, slug });
  };

我错过了什么?

推荐答案

这是一个 CORS 问题，浏览器采用的一种安全措施(这解释了为什么您可以通过 Postman 做到这一点).

This is a CORS problem, a security measure adopted by browsers (which explains why you could do it via Postman).

基本上，Chrome 会将预检请求发送到服务器以了解它的期望，并且服务器不会将您的来源作为可接受的来源(Access-Control-Allow-Origin 标头)返回.

Basically, Chrome sends the preflight request to the server to know what it is expecting, and the server isn't returning your origin as an acceptable one (Access-Control-Allow-Origin Header).

正如@AndyPiper 在评论中指出的那样，Twitter 的 API 不支持 CORS.这意味着您的请求只能在服务器端发出，而不是从浏览器发出.

As @AndyPiper pointed out in the comments, Twitter's API does not support CORS. That means your request will only work if made from server-side, not from the browser.

这篇关于Axios 和推特 API的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！