带cookie的跨域解决方案

我会带着你远行 2023-02-12 06:19 13阅读 0赞

**带cookie的跨域解决方案**  
本解决方案基于SpringBoot，首先编写FilterConfig类：

import org.springframework.boot.web.servlet.FilterRegistrationBean;
    import org.springframework.context.annotation.Bean;
    import org.springframework.context.annotation.Configuration;
    
    /** * @author by mazhen * @Classname CorsFilterConfig * @Description TODO * @Date 2020/5/24 22:41 */
    @Configuration
    public class CorsFilterConfig { 
    
        @Bean
        public FilterRegistrationBean corsRegistration() { 
    
            FilterRegistrationBean registrationBean = new FilterRegistrationBean();
            //所有的请求都经过此过滤器
            registrationBean.addUrlPatterns("/*");
            registrationBean.setFilter(new CorsFilter());
            return registrationBean;
        }
    }

CorsFilter类如下：

import org.springframework.util.StringUtils;
    
    import javax.servlet.*;
    import javax.servlet.http.HttpServletRequest;
    import javax.servlet.http.HttpServletResponse;
    import java.io.IOException;
    
    /** * @author by mazhen * @Classname CorsFilter * @Description TODO * @Date 2020/5/24 23:29 */
    public class CorsFilter implements Filter { 
        @Override
        public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException { 
            HttpServletResponse res = (HttpServletResponse) servletResponse;
            HttpServletRequest req = (HttpServletRequest) servletRequest;
            String origin = req.getHeader("Origin");
            if (!StringUtils.isEmpty(origin)) { 
                //带cookie的时候，origin必须是全匹配，不能使用*
                res.addHeader("Access-Control-Allow-Origin",origin);
            }
            
            String headers =  req.getHeader("Access-Control-Request-Headers");
            //支持所有请求头的跨域（包含自定义）
            if (!StringUtils.isEmpty(headers)) { 
                res.addHeader("Access-Control-Allow-Headers",headers);
            }
            res.addHeader("Access-Control-Allow-Methods","*");
            //OPTIONS请求缓存3600秒
            res.addHeader("Access-Control-Max-Age","3600");
            //enable cookie
            res.addHeader("Access-Control-Allow-Credentials","true");
            filterChain.doFilter(req,res);
        }
    }

**[CORS请求的简单请求和非简单请求][CORS]**  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21hbWVuZzE5ODg_size_16_color_FFFFFF_t_70]

[CORS]: https://blog.csdn.net/yexudengzhidao/article/details/100104134
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21hbWVuZzE5ODg_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/2020052423510082.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21hbWVuZzE5ODg=,size_16,color_FFFFFF,t_70