Beyond CORS, Safely
While developing the frontend, have you ever tried to fetch data from an external API, only to face the 'CORS error' turning your browser console red?
CORS (Cross-Origin Resource Sharing) is a security policy enforced by browsers to prevent malicious websites from intercepting data. However, for frontend developers wanting to quickly bring new ideas to life, it feels like a massive barrier.
This problem cannot be solved with pure frontend code alone. Ultimately, you either have to beg a backend developer to "open up the CORS policy" or build a complex intermediary server (Proxy) yourself to bypass the external API.
To prevent frontend developers from wasting energy on such server infrastructure setups, Essepage has built the concept of a 'Server-Side Proxy' directly into the platform.
A Simple yet Powerful Built-in Proxy API
Although it carries the technical term "proxy," there is no need to write complex server code. Simply create a +fetch.json file and enter the external API address, and the platform will automatically build a fast and powerful 'Built-in proxy API' just for you.
By utilizing this built-in proxy API instead of calling the external API directly from the browser, you gain the following remarkable benefits:
1. Perfect CORS Bypass
The browser no longer connects directly to the external API server; instead, it calls the secure built-in proxy API on the same domain. Because Essepage's servers communicate with the external API on your behalf, the CORS errors are fundamentally resolved.
2. Private Keys Stay Private
To use useful external APIs for weather, payments, or AI, you receive a unique 'Private Key'. Exposing this key directly in your frontend code running in the browser is as dangerous as hanging your house key on the front gate.
However, the built-in proxy API provided by Essepage operates in a secure server environment outside the browser, allowing you to fetch data safely without exposing any sensitive security information in the frontend code.
3. Secure Built-in Proxy API
"What if someone steals my Proxy API and calls it without permission from their own site?"
You might worry about this.
Don't worry. The built-in proxy API you create can only be successfully called from within your own project. Unauthorized access from other domains, as well as other projects, is strictly blocked.
Limitless API Integration
Now, you no longer need to spin up a separate server or walk on eggshells around backend developers just to fetch data from external APIs. You are completely freed from complex CORS restrictions while maintaining strict security.
Freely connect with all the data in the world.