nginx跨域+反向代理解决处理（已验证）

Mj_lo

已于 2024-11-06 13:50:11 修改

阅读量921

点赞数 6

分类专栏： nginx 文章标签： nginx

于 2022-08-26 02:06:31 首次发布

本文链接：https://blog.csdn.net/Mj_lo/article/details/126535495

版权

nginx 专栏收录该内容

2 篇文章 0 订阅

订阅专栏

此处背景：

1：服务端未做任何跨域设置

2：前端未做任何跨域设置

3：nginx处理跨域

此处map解决莫名其妙多了Access-Control-Allow-Origin问题

直接复制即可用，如果还是跨域仔细看报错提示。一般是多处设置了重复跨域配置

示例

map $sent_http_access_control_allow_origin $cors_header {
    ''      "*";        # 如果头部不存在，设置为 *
    default "";         # 如果已存在，不设置
}
server {
    listen 443 ssl;
    client_max_body_size 1000m;
    server_name  域名

#    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;    #安全链接可选的加密协议
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    ssl_certificate  /etc/nginx/conf.d/ssl.pem;
    ssl_certificate_key /etc/nginx/conf.d/ssl.key;
 # 只在头部不存在时添加
    add_header Access-Control-Allow-Origin $cors_header;
    add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS, PUT, DELETE' always;
    add_header 'Access-Control-Allow-Headers' 'DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,access-control-allow-origin,Origin,Accept' always;
    add_header 'Access-Control-Allow-Credentials' 'true' always;
    add_header 'Access-Control-Max-Age' '1728000' always;

    # OPTIONS 请求处理
    if ($request_method = 'OPTIONS') {
        return 204;
    }

   location / {
    proxy_pass  http://127.0.0.1:8080;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Host $http_host;
    proxy_set_header X-Forwarded-Port $server_port;
    proxy_set_header    Upgrade             $http_upgrade;
    proxy_set_header    Connection          "upgrade";
    }
}