SpringSecurity+Oauth2获取AccessToken跨域CORS问题解决_security使用过期token调用接口报跨域-CSDN博客

本文链接：https://blog.csdn.net/Eiverl/article/details/108750795

本文介绍了在SpringBoot+SpringSecurity+Oauth2项目中遇到的No 'Access-Control-Allow-Origin'错误，详细讨论了如何通过CORS过滤器解决此问题。尝试了多种配置方式，最终通过跟踪源码找到正确解决方案，即删除原有配置，新增一个自定义filter，成功解决了获取AccessToken的跨域访问问题。

摘要由CSDN通过智能技术生成

问题：
在springboot+SpringSecurity+oauth2项目中，No ‘Access-Control-Allow-Origin’ 终极解决办法，在使用了corsFilter进行跨域处理，相关代码配置如下：

@Override
    public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {
        HttpServletRequest request = (HttpServletRequest) servletRequest;
        HttpServletResponse response = (HttpServletResponse) servletResponse;
        response.setHeader("Access-Control-Allow-Origin","*");
        response.setHeader("Access-Control-Allow-Credentials","true");
        response.setHeader("Access-Control-Allow-Methods","POST,GET,OPTIONS,PUT,DELETE,PATCH,HEAD");
        response.setHeader("Access-Control-Allow-Max-Age","3600");
        response.setHeader("Access-Control-Allow-Headers","*");
        if("OPTIONS".equalsIgnoreCase(request.getMethod())){
            response.setStatus(HttpServletResponse.SC_OK);
        }else{
            filterChain.doFilter(servletRequest,servletResponse);
        }
    }

@Override
    protected void configure(HttpSecurity http) throws Exception {
        http.formLogin()
                .loginPage("/login")
                .and()
                .authorizeRequests()
                .antMatchers("/login").permitAll()
                .anyRequest()
                .authenticated()
                .and().csrf().disable().cors();

    }

但是一运行代码就会报如下的异常：

org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'springSecurityFilterChain' defined in class path resource [org/springframework/security/config/annotation/web/configuration/WebSecurityConfiguration.class]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [javax.servlet.Filter]: Factory method 'springSecurityFilterChain' threw exception; nested exception is org.springframework.beans.factory.BeanNotOfRequiredTypeException: Bean named 'corsFilter' is expected to be of type 'org.springframework.web.filter.CorsFilter' but was actually of type 'org.springframework.boot.web.servlet.FilterRegistrationBean'
	at org.springframework.beans.factory.support.ConstructorResolver.instantiateUsingFactoryMethod(ConstructorResolver.java