详解springboot设置cors跨域请求的两种方式

详解springboot设置cors跨域请求的两种方式

1、第一种：

public class CorsFilter extends OncePerRequestFilter {

static final String ORIGIN = "Origin";

protected void doFilterInternal(

HttpServletRequest request,

HttpServletResponse response,

FilterChain filterChain) throws ServletException, IOException {

String origin = request.getHeader(ORIGIN);

response.setHeader("Access-Control-Allow-Origin", "*");//* or origin as u prefer

response.setHeader("Access-Control-Allow-Credentials", "true");

response.setHeader("Access-Control-Allow-Methods", "PUT, POST, GET, OPTIONS, DELETE");

response.setHeader("Access-Control-Max-Age", "3600");

response.setHeader("Access-Control-Allow-Headers", "content-type, authorization");

http:// if (request.getMethod().equals("OPTIONS"))

response.setStatus(HttpServletResponse.SC_OK);

else

filterChain.doFilter(request, response);

}

}

@Bean

public CorsFilter corsFilter() throws Exception {

return new CorsFilter();

}

http

http:// .addFilterBefore(corsFilter(), UsernamePasswordAuthenticationFilter.class)

.addFilterBefore(http://authenticationTokenFilterBean(), UsernamePasswordAuthenticationFilter.class)

.headers()

.cacheControl();

2、第二种：

@Configuration

public class CorsConfig {

@Bean

public FilterRegistrationBean corsFilter() {

UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();

CorsConfiguration config = new CorsConfiguration();

config.setAllowCredentials(true);

// 设置你要允许的网站域名，如果全允许则设为 *

config.addAllowedOrigin("http://localhost:4200");

// 如果要限制 HEADER 或 METHOD 请自行更改

config.addAllowedHeader("*");

config.addAllowedMethod("*");

source.registerCorsConfiguration("/**", config);

FilterRegistrationBean bean = new FilterRegistrationBean(new CorsFilter(source));

// 这个顺序很重要哦，为避免麻烦请设置在最前

bean.setOrder(0);

return bean;

}

}

版权声明：本文内容由网络用户投稿，版权归原作者所有，本站不拥有其著作权，亦不承担相应法律责任。如果您发现本站中有涉嫌抄袭或描述失实的内容，请联系我们jiasou666@gmail.com 处理，核实后本网站将在24小时内删除侵权内容。