Google Drive CORS
cors, google-drive-api
Solution
With `Access-Control-Allow-Credentials: true`
Because it would be a huge security hole.
Any website you visited would be able to grab files from your Google Drive if you were logged into Google.
Without `Access-Control-Allow-Credentials: true` or with `Access-Control-Allow-Credentials: false`
You could ask Why is the Access-Control-Allow-Origin header necessary at all?
Problem
Is there a reason why Google Drive does not set Access-Control-Allow-Origin:* on the file data available at downloadUrl. I am interested in downloading binary files from Google Drive using ajax/CORS. However, the only way to achieve this seems to be through a proxy.