解决跨域问题 ex:Access-Control-Allow-Origin,strict-origin-when-cross-origin

no-wind-no-rain

已于 2023-03-29 16:21:41 修改

阅读量360

点赞数

文章标签： java 前端 servlet

于 2023-03-28 14:33:44 首次发布

本文链接：https://blog.csdn.net/Sagittarius_O/article/details/129815311

版权

跨域配置类解决方法

@Configuration
public class WebMvcConfig implements WebMvcConfigurer {

    @Override
    public void addCorsMappings(CorsRegistry registry) {
        registry.addMapping("/api/**")
                .allowedOrigins("*")
                .allowCredentials(true)
                .allowedMethods("POST", "GET", "DELETE", "PUT")
                .maxAge(3600);
    }

}

注解解决方法

@Controller
@RequestMapping(value = "/Account", produces = { "text/html;charset=UTF-8;", "application/json;charset=UTF-8;" })
@CrossOrigin(origins = "*", maxAge = 3600)
public class AccountController {
}

响应头设置解决方法

@RequestMapping(value = "/login", method = RequestMethod.POST)
@ResponseBody
public String signIn(@RequestParam String user, @RequestParam String password, HttpServletResponse response) {
	response.setHeader("Access-Control-Allow-Origin", "*");
	return accountService.signIn(user, password);
}

xml配置解决方法

<mvc:cors>	
	<mvc:mapping path="/**"
        allowed-origins="*"
        allowed-methods="POST, GET, DELETE, PUT"
        allowed-headers="*"
        allow-credentials="true" />
</mvc:cors>

配置类相关参数

 res.addHeader("Access-Control-Allow-Credentials", "true");
        res.addHeader("Access-Control-Allow-Origin", "*");
        res.addHeader("Access-Control-Allow-Methods", "GET, POST, DELETE, PUT");
        res.addHeader("Access-Control-Allow-Headers", "Content-Type,X-CAF-Authorization-Token,sessionToken,X-TOKEN");