springBoot跨域访问配置

背景：本地和电脑浏览器访问都没有问题，接入手机端后，手机端访问超时，提示跨域错误；

 

由于浏览器的安全性限制，不允许AJAX访问 协议不同、域名不同、端口号不同的 数据接口， 
浏览器认为这种访问不安全

一：

在后台加入一个启动加载的config，具体代码

package com.mozi.hip.config;

import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.cors.CorsConfiguration;
import org.springframework.web.cors.UrlBasedCorsConfigurationSource;
import org.springframework.web.filter.CorsFilter;

@Configuration
public class CorsConfig {
    private CorsConfiguration buildConfig() {
        CorsConfiguration corsConfiguration = new CorsConfiguration();
        corsConfiguration.addAllowedOrigin("*"); // 允许任何域名使用
        corsConfiguration.addAllowedHeader("*"); // 允许任何头
        corsConfiguration.addAllowedMethod("*"); // 允许任何方法（post、get等）
        return corsConfiguration;
    }

    @Bean
    public CorsFilter corsFilter() {
        UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
        source.registerCorsConfiguration("/**", buildConfig()); // 对接口配置跨域设置
        return new CorsFilter(source);
    }
}

 这样就可以访问成功了！

二：

package com.mozi.wechat.batch.config;

import java.io.IOException;
import java.util.ArrayList;
import java.util.List;

import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletResponse;

import org.springframework.boot.web.servlet.FilterRegistrationBean;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.cors.CorsConfiguration;
import org.springframework.web.cors.UrlBasedCorsConfigurationSource;
import org.springframework.web.filter.CorsFilter;

/**
 * @ClassName:DomainFilter
 * @Description: 跨域
 * @author 
 * @date 2019年1月15日下午5:54:02
 */
@Configuration
public class DomainFilter implements Filter{

	@Override
	public void destroy() {
		// TODO Auto-generated method stub
		
	}

	@Override
	public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain)
			throws IOException, ServletException {
		 HttpServletResponse response = (HttpServletResponse) res;
	        response.setHeader("Access-Control-Allow-Origin", "*");
	        response.setHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS, DELETE");
	        response.setHeader("Access-Control-Max-Age", "3600");
	        response.addHeader("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept");
	        chain.doFilter(req, res);
	}

	@Override
	public void init(FilterConfig arg0) throws ServletException {
		// TODO Auto-generated method stub
		
	}
	
	@Bean
    public FilterRegistrationBean<DomainFilter> filterRegistrationBean() {
        FilterRegistrationBean<DomainFilter> registrationBean = new FilterRegistrationBean<DomainFilter>();
        DomainFilter domainFilter = new DomainFilter();
        registrationBean.setFilter(domainFilter);
        List<String> urlPatterns = new ArrayList<String>();
        urlPatterns.add("/*");
        registrationBean.setUrlPatterns(urlPatterns);
        return registrationBean;
    }
	
	  @Bean
	       public CorsFilter corsFilter() {
	          final UrlBasedCorsConfigurationSource urlBasedCorsConfigurationSource = new UrlBasedCorsConfigurationSource();
	          final CorsConfiguration corsConfiguration = new CorsConfiguration();
	          corsConfiguration.setAllowCredentials(true);
	          corsConfiguration.addAllowedOrigin("*");
	          corsConfiguration.addAllowedHeader("*");
	          corsConfiguration.addAllowedMethod("*");
	          urlBasedCorsConfigurationSource.registerCorsConfiguration("/**", corsConfiguration);
	         return new CorsFilter(urlBasedCorsConfigurationSource);
	     }

}

ps: 如果配置后访问还有跨域问题，试试将post请求改成get请求

 

参考：https://blog.csdn.net/larger5/article/details/79805617

 

三：注解方式

@CrossOrigin注解：启用CORS（默认情况下，@CrossOrigin允许在@RequestMapping注解中指定的所有源和HTTP方法）

其中@CrossOrigin中的2个参数：

origins ： 允许可访问的域列表

maxAge：准备响应前的缓存持续的最大时间（以秒为单位）。

参考：https://www.mmzsblog.cn/articles/2019/08/23/1566526598886.html