Cross domain scripting with jQuery

client-withCredentials.js

$.ajaxPrefilter('json', function(options, orig, jqXHR) {
	if (options.crossDomain && !$.support.cors) return 'jsonp'
});

$.ajax({
	url: 'http://nodeserver:3000',
	dataType: 'json',
	success: callback,
	xhrFields: {
		withCredentials: true
	}
});

function callback(d) {
	console.log(d);
};

client.js

$.ajaxPrefilter('json', function(options, orig, jqXHR) {
	if (options.crossDomain && !$.support.cors) return 'jsonp'
});

$.ajax({
	url: 'http://nodeserver:3000',
	dataType: 'json',
	success: callback
});

function callback(d) {
	console.log(d);
};

server.js

var http = require('http'),
		url = require('url');

var json = JSON.stringify([
	{
		command: 'holla back, yungun',
		response: 'hooo hooo!'
	}
]);

http.createServer(function(req, res) {
	var reqUrl = url.parse(req.url, true),
			resp = json,
			callback = reqUrl.query.callback;
	
	if (callback) {
		resp = callback + '(' + json + ')';
		res.writeHead(200, {
			'Content-Type': 'application/javascript'
		});
	} else {
		res.writeHead(200, {
			'Content-Type': 'application/json',
			'Access-Control-Allow-Origin': '*'
		});
	}	

	res.end(resp, encoding='utf8');
}).listen(3000);
console.log('Listening on port 3000');