ajax 跨域解决方案

ajax 跨域解决方案

1.被调用方解决跨域。增加Filter

public class CrosFilter implements Filter {

	@Override
	public void init(FilterConfig filterConfig) throws ServletException {
		// TODO Auto-generated method stub

	}

	@Override
	public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)
			throws IOException, ServletException {
		// TODO Auto-generated method stub

		HttpServletResponse res = (HttpServletResponse) response;
		
		HttpServletRequest req = (HttpServletRequest) request;
		
		String origin = req.getHeader("Origin");
		
		if (!org.springframework.util.StringUtils.isEmpty(origin)) {
			//带cookie的时候，origin必须是全匹配，不能使用*
			res.addHeader("Access-Control-Allow-Origin", origin);			
		}
		
		res.addHeader("Access-Control-Allow-Methods", "*");
		
		String headers = req.getHeader("Access-Control-Request-Headers");
		
		// 支持所有自定义头
		if (!org.springframework.util.StringUtils.isEmpty(headers)) {
			res.addHeader("Access-Control-Allow-Headers", headers);			
		}
		
		res.addHeader("Access-Control-Max-Age", "3600");
		
		// enable cookie
		res.addHeader("Access-Control-Allow-Credentials", "true");
		
		chain.doFilter(request, response);
	}

	@Override
	public void destroy() {
		// TODO Auto-generated method stub

	}

}

2.被调用方Nginx解决方案

server{
	listten 80;
	server_name b.com;

	location /{
	 	proxy_pass http://localhost:8080
	 	add_header Access-Control-Allow-Methods *;
	 	add_header Access-Control-Max-Age 3600;
	 	add_header Access-Control-Allow-Credentials true;
	 	add_header Access-Control-Allow-Origin $http_origin;
	 	add_header Access-Control-Allow-Headers
	 	$http_access_control_request_headers;
	 	if($requset_method=OPTIONS){
	 		return 200;
	 	}

	}
}