请求的资源上不存在 'Access-Control-Allow-Origin' header。 (google 联系人 api)

No 'Access-Control-Allow-Origin' header is present on the requested resource. (google contacts api)

我正在尝试获取 google 联系人的照片。从 api guide 找到这个:

https://www.google.com/m8/feeds/photos/media/{userEmail}/{contactId}

我的代码:

`$.get("https://www.google.com/m8/feeds/photos/media/default/54b8abe0f52ad02?access_token=" + authorizationResult.access_token + "&v=3.0",
        function(response){
          //process the response here
          console.log(response);
        }
      );`

它给我这个错误:

请求的资源上不存在 'Access-Control-Allow-Origin' header。因此不允许访问来源“http://localhost:3000”。

但这似乎工作正常

`$.get("https://www.google.com/m8/feeds/contacts/default/full?alt=json&access_token=" + authorizationResult.access_token + "&max-results=500&v=3.0",
        function(response){
          //process the response here
          console.log(response);
        }
      );`

编辑: 完整的 js 脚本:

`

<script type="text/javascript">
  var clientId = 'my client id';
  var apiKey = 'api key';
  var scopes = 'https://www.googleapis.com/auth/contacts.readonly';
  $(document).on("click",".googleContactsButton", function(){
    gapi.client.setApiKey(apiKey);
    window.setTimeout(authorize);
  });
  function authorize() {
    gapi.auth.authorize({client_id: clientId, scope: scopes, immediate: false}, handleAuthorization);
  }
  function handleAuthorization(authorizationResult) {
    if (authorizationResult && !authorizationResult.error) {
      $.get("https://www.google.com/m8/feeds/photos/media/default/54b8abe0f52ad02?access_token=" + authorizationResult.access_token + "&v=3.0",
        function(response){
          //process the response here
          console.log(response);
        }
      );
    }
  }
</script>

`

我通过这样做得到了图片:(前缀图像 url 与代理 url)

`  function handleAuthorization(authorizationResult) {
    if (authorizationResult && !authorizationResult.error) {
      console.log(authorizationResult);
      var accessToken = authorizationResult.access_token;
      $.get("https://www.google.com/m8/feeds/contacts/default/thin?alt=json&access_token=" + accessToken + "&max-results=500&v=3.0",
        function(response){
          //process the response here
          console.log(response);
          let photoUrl = response.feed.entry[2].link[0].href + "&access_token=" + accessToken;
          let proxy = 'https://cors.now.sh/';
          let finalPhotoUrl = proxy + photoUrl;
          document.getElementById('photo').src = finalPhotoUrl;
        }
      );
    }
  }`