Blog
Angular HttpClient: CORS, interceptors, and proxy.conf.json for local development
Use the dev-server proxy to avoid browser CORS during ng serve; production builds still need real API headers.
1 min read
angularcorsfrontend
Production parity
Run staging builds against the same API hostnames users hit to catch misaligned cookie domains.
Angular Universal SSR adds server-side fetches that bypass CORS—test both modes.
Monorepo tips
Share OpenAPI-generated types between apps so header names stay consistent across teams.
Lint environment files so API base URLs never point to http:// on production builds.