cors跨域设置

比眉伴天荒 2021-07-26 20:36 506阅读 0赞

import org.springframework.context.annotation.Bean;
    import org.springframework.context.annotation.Configuration;
    import org.springframework.web.cors.CorsConfiguration;
    import org.springframework.web.cors.UrlBasedCorsConfigurationSource;
    import org.springframework.web.filter.CorsFilter;
    
    @Configuration
    public class GlobalCorsConfig {
        @Bean
        public CorsFilter corsFilter() {
            //1.添加CORS配置信息
            CorsConfiguration config = new CorsConfiguration();
            //1) 允许的域,不要写*，否则cookie就无法使用了
            config.addAllowedOrigin("http://manage.leyou.com");
            //2) 是否发送Cookie信息
            config.setAllowCredentials(true);
            //3) 允许的请求方式
            config.addAllowedMethod("OPTIONS");
            config.addAllowedMethod("HEAD");
            config.addAllowedMethod("GET");
            config.addAllowedMethod("PUT");
            config.addAllowedMethod("POST");
            config.addAllowedMethod("DELETE");
            config.addAllowedMethod("PATCH");
            // 4）允许的头信息
            config.addAllowedHeader("*");
    
            //2.添加映射路径，我们拦截一切请求
            UrlBasedCorsConfigurationSource configSource = new UrlBasedCorsConfigurationSource();
            configSource.registerCorsConfiguration("/**", config);
    
            //3.返回新的CorsFilter.
            return new CorsFilter(configSource);
        }
    }

我们需要做的就是定义上面那个配置类

**spring内置的CorsUtils类会在每次请求时获取到，请求的如下三个参数**

> 1.  Origin: [http://manage.leyou.com][http_manage.leyou.com]
> 2.  Access-Control-Request-Method: PUT
> 3.  Access-Control-Request-Headers: X-Custom-Header

**然后拿到这三个参数跟上面的配置进行比较，如果通过就设置响应头信息允许跨域**

> 1.  Access-Control-Allow-Origin: [http://manage.leyou.com][http_manage.leyou.com]
> 2.  Access-Control-Allow-Methods: GET, POST, PUT
> 3.  Access-Control-Allow-Headers: X-Custom-Header

**但是上面这些复杂的操作spring已经帮我们做好了，我们只需要添加如上配置类，即可实现跨域**

[http_manage.leyou.com]: http://manage.leyou.com