Proxy rewrites Origin header to match the target server URL

[koles]

The new proxy option introduced in #282 works well for GET requests but many browsers send Origin headers with same-origin POST/PUT/DELETE requests.

This pull request makes the http-proxy-middleware to overwrite the original Origin header (if set) to match the target server URL.

[facebook-github-bot]

Thank you for your pull request and welcome to our community. We require contributors to sign our Contributor License Agreement, and we don't seem to have you on file. In order for us to review and merge your code, please sign up at https://code.facebook.com/cla - and if you have received this in error or have any questions, please drop us a line at cla@fb.com. Thanks!

If you are contributing on behalf of someone else (eg your employer): the individual CLA is not sufficient - use https://developers.facebook.com/opensource/cla?type=company instead. Contact cla@fb.com if you have any questions.

[facebook-github-bot]

Thank you for signing our Contributor License Agreement. We can now accept your code for this (and any) Facebook open source project. Thanks!

[gaearon]

Could you please explain how to verify this works? Maybe you could create an example
app on top of which I could test this change?

[koles]

See https://github.com/koles/react-scripts-pr-1212

The app POSTs a dummy authentication payload to a web service specified in the "proxy" attribute of the package.json file and displays the result, see https://github.com/koles/react-scripts-pr-1212/blob/master/src/App.js for details.

Before applying the patch (using react-scripts 0.8.3):
Service responds with status 403 (Cross origin requests not allowed).

After:
Service responds with status 401 (Bad Login or Password!) - clearly the request was accepted and processed.

[gaearon]

Could you also add a comment to the source code please?

[koles]

Done.

[gaearon]

Thanks!

[gaearon]

Should be fixed in react-scripts@0.8.4. Please verify.
https://github.com/facebookincubator/create-react-app/releases/tag/v0.8.4