index.js

"use strict";
const request = require('request');
const http = require('http');
const url = require('url');
let PORT = process.env.PORT || 8000;

process.argv.forEach(function (arg) {
  if(arg.indexOf('--port=') === 0) {
    PORT = parseInt(arg.replace('--port=', ''), 10);
  }
});

http.createServer((req, response) => {
  let remoteURL = url.parse(req.url.substring(1));
  if(!remoteURL.hostname || remoteURL.hostname === 'localhost') return response.end();

  if(req.method === 'OPTIONS') {
    response.writeHead(200, {
      'access-control-allow-origin': req.headers.origin || '*',
      'access-control-allow-headers': 'Origin, X-Requested-With, Content-Type, Accept, authorization'
    });
    return response.end();
  }

  for(let key in req.headers) {
    if(key.match(/host|cookie/ig)){
      delete req.headers[key];
    }
  }

  let config = {
    url: remoteURL,
    followAllRedirects: true,
    method: req.method,
    headers: req.headers,
    gzip: true
  };

  if(req.method !== 'HEAD') {
    config.body = req;
  }

  request(config)
    .on('response', res => {
      res.headers['access-control-allow-origin'] = req.headers.origin || '*';
      res.headers['access-control-allow-headers'] = 'Origin, X-Requested-With, Content-Type, Accept, authorization';
      delete res.headers['access-control-allow-credentials'];
      delete res.headers['access-control-allow-methods'];
      delete res.headers['content-encoding'];
      delete res.headers['content-length'];
      response.writeHead(res.statusCode, res.headers);
    })
    .on('data', function(data) {
      response.write(data);
    })
    .on('error', () => response.end())
    .on('end', () => response.end());

}).listen(PORT);