title: Angularjs / sailsjs :Access-Control-Allow-Origin is not allowed by Access-Control-Allow-Headers
body: <p>I am struggling on an issue with cors between angular js and sails.js (node.js framework)</p>
  
  <p>I try to fix the error: XMLHttpRequest cannot load <a href="http://localhost:1337/en/auth/forgetpass/email" rel="noreferrer">http://localhost:1337/en/auth/forgetpass/email</a>. Request header field Access-Control-Allow-Origin is not allowed by Access-Control-Allow-Headers.</p>
  
  <p>When I do not activate my interceptor it works well. I do not have this error. When I activate it, I have the error.</p>
  
  <p>In my .config I setup the code below:</p>
  
  <pre><code>  //Enable cross domain calls
  $httpProvider.defaults.useXDomain = true;
  delete $httpProvider.defaults.headers.common['X-Requested-With'];
  
  $httpProvider.defaults.headers.common['Access-Control-Allow-Headers'] = '*';
  $httpProvider.defaults.headers.common['Access-Control-Allow-Origin'] = '*';
  $httpProvider.defaults.headers.common['Access-Control-Allow-Methods'] = 'GET,POST,PUT,HEAD,DELETE,OPTIONS';
  
  $httpProvider.interceptors.push('TokenInterceptor');
  </code></pre>
  
  <p>Then in my interceptor I setup the code below:</p>
  
  <pre><code>    return {
      request: function (config) {
        var id = Session.getprop('id');
        if(id) {
          config.headers = config.headers || {};
          config.headers.Authorization = 'Bearer ' + id;
        }
          return config;
      }, ...
  </code></pre>
  
  <p>Finally, the result from the chrome network tab is:</p>
  
  <pre><code>Remote Address:127.0.0.1:1337
  Request URL:http://localhost:1337/en/auth/forgetpass/email
  Request Method:OPTIONS
  Status Code:200 OK
  
  Response Headers
  Access-Control-Allow-Credentials:true
  Access-Control-Allow-Headers:*
  Access-Control-Allow-Methods:GET, POST, PUT, DELETE, OPTIONS, HEAD
  Access-Control-Allow-Origin:*
  Allow:GET,POST,PUT,HEAD,DELETE,TRACE,COPY,LOCK,MKCOL,MOVE,PROPFIND,PROPPATCH,UNLOCK,REPORT,MKACTIVITY,CHECKOUT,MERGE,M-SEARCH,NOTIFY,SUBSCRIBE,UNSUBSCRIBE,PATCH
  Connection:keep-alive
  Content-Length:154
  Content-Type:text/html; charset=utf-8
  Date:Sun, 12 Apr 2015 23:51:14 GMT
  Set-Cookie:sails.sid=s%3A-bZxQgFntbDqTtaFyWDFFgFr.szR0F68VfIBjVW9kyans9d6v5fz7RMtalQCoMFdbH%2Fg; Path=/;   HttpOnly
  X-Powered-By:Sails &lt;sailsjs.org&gt;
  
  Request Headers
  Accept:*/*
  Accept-Encoding:gzip, deflate, sdch
  Accept-Language:en-US,en;q=0.8
  Access-Control-Request-Headers:access-control-allow-origin, accept, access-control-allow-headers, access-control-allow-methods
  Access-Control-Request-Method:POST
  Connection:keep-alive
  Host:localhost:1337
  Origin:http://localhost:9000
  Referer:http://localhost:9000/
  User-Agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.118 Safari/537.36
  </code></pre>
  
  <p>And I still get the same error. An idea?</p>
  
  <p>Many thanks!</p>