springboot 解决跨域

布满荆棘的人生 2024-04-19 15:40 64阅读 0赞

本文参考借鉴：[https://blog.csdn.net/lizc\_lizc/article/details/81155895][https_blog.csdn.net_lizc_lizc_article_details_81155895]

1.使用@CrossOrigin注解实现  
对单个接口配置CORS

@CrossOrigin(origins = \{"\*"\})  
@PostMapping("/insert")  
@ResponseBody  
public Result insert() \{  
return Result.ok();  
\}

对某个Controller下的所有接口配置CORS

@CrossOrigin  
@Controller  
public class UnitProjectController extends AbstractController \{  
  
\}

2.配置全局的CORS  
方法（1）添加配置类

package com.digipower.cors.config;  
  
import org.springframework.context.annotation.Bean;  
import org.springframework.context.annotation.Configuration;  
import org.springframework.web.cors.CorsConfiguration;  
import org.springframework.web.cors.UrlBasedCorsConfigurationSource;  
import org.springframework.web.filter.CorsFilter;  
  
@Configuration  
public class CORSConfig \{  
@Bean  
public CorsFilter corsFilter() \{  
final UrlBasedCorsConfigurationSource urlBasedCorsConfigurationSource = new UrlBasedCorsConfigurationSource();  
final CorsConfiguration corsConfiguration = new CorsConfiguration();  
corsConfiguration.setAllowCredentials(true);  
corsConfiguration.addAllowedOrigin("\*");  
corsConfiguration.addAllowedHeader("\*");  
corsConfiguration.addAllowedMethod("\*");  
urlBasedCorsConfigurationSource.registerCorsConfiguration("/\*\*", corsConfiguration);  
return new CorsFilter(urlBasedCorsConfigurationSource);  
\}  
\}

方法（2）添加配置类

package com.digipower.cors.config;  
  
import org.springframework.context.annotation.Configuration;  
import org.springframework.web.servlet.config.annotation.CorsRegistry;  
import org.springframework.web.servlet.config.annotation.WebMvcConfigurationSupport;  
  
@Configuration  
public class SpringMvcConfig extends WebMvcConfigurationSupport \{  
@Override  
public void addCorsMappings(CorsRegistry registry) \{  
registry.addMapping("/\*\*")  
.allowedOrigins("\*")  
.allowedMethods("POST", "GET", "PUT", "OPTIONS", "DELETE")  
.maxAge(3600)  
.allowCredentials(true);  
\}  
\}

方法（3）使用Filter方法，还需要在启动类加上@ServletComponentScan注解

package com.digipower.cors.filter;  
  
import javax.servlet.\*;  
import javax.servlet.annotation.WebFilter;  
import javax.servlet.http.HttpServletRequest;  
import javax.servlet.http.HttpServletResponse;  
import java.io.IOException;  
  
@WebFilter(urlPatterns = "\*")  
public class CorsFilter implements Filter \{  
@Override  
public void init(FilterConfig filterConfig) throws ServletException \{  
  
\}  
  
@Override  
public void doFilter(ServletRequest request, ServletResponse response, FilterChain filterChain) throws IOException, ServletException \{  
HttpServletRequest httpRequest = (HttpServletRequest)request;  
HttpServletResponse httpResponse = (HttpServletResponse) response;  
httpResponse.setCharacterEncoding("UTF-8");  
httpResponse.setContentType("application/json; charset=utf-8");  
httpResponse.setHeader("Access-Control-Allow-Origin", "\*");  
httpResponse.setHeader("Access-Control-Allow-Credentials", "true");  
httpResponse.setHeader("Access-Control-Allow-Methods", "\*");  
httpResponse.setHeader("Access-Control-Allow-Headers", "Content-Type,Authorization");  
httpResponse.setHeader("Access-Control-Expose-Headers", "\*");  
filterChain.doFilter(httpRequest, httpResponse);  
\}  
  
@Override  
public void destroy() \{  
  
\}  
\}

[https_blog.csdn.net_lizc_lizc_article_details_81155895]: https://blog.csdn.net/lizc_lizc/article/details/81155895