> 1. Find a way to proxy requests so that there’s no CORS Turns out this is really, really easy. I tried this recently on a cookie-authenticated web api (afte

> 1. Find a way to proxy requests so that there’s no CORS Turns out this is really, really easy. I tried this recently on a cookie-authenticated web api (after discovering that CORS cookies are useless because mobile Safari will always block them). I'm never touching CORS again unless it's a blasting out a bunch of '*' Access-Control-Whatevers on a public API.