方式一:
1、在启动类中继承WebMvcConfigurerAdapter,重写其中的addCorsMappings方法
package com.example.springbootdemo;
import org.springframework.boot.SpringApplication;
import org.springframework.boot.autoconfigure.SpringBootApplication;
import org.springframework.web.servlet.config.annotation.CorsRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurerAdapter;
@SpringBootApplication
public class SpringbootdemoApplication extends WebMvcConfigurerAdapter {
public static void main(String[] args) {
SpringApplication.run(SpringbootdemoApplication.class, args);
}
@Override
public void addCorsMappings(CorsRegistry registry) {
registry.addMapping("/**")
.allowCredentials(true)
.allowedHeaders("*")
.allowedOrigins("*")
.allowedMethods("*");
}
}
2、在允许跨域请求的controller中使用@CrossOrigin 注解
import org.springframework.web.bind.annotation.CrossOrigin;
@CrossOrigin
@RestController
public class HelloWorldController {
/**
*
*
*/
}
方式二:
public class CorsInterceptor implements HandlerInterceptor {
private static final Logger logger = LoggerFactory.getLogger(CorsInterceptor.class);
private String originRegex;
public CorsInterceptor(String originRegex) {
this.originRegex = originRegex;
}
@Override
public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) {
response.setContentType("text/plain");
response.setHeader("Pragma", "No-cache");
response.setHeader("Cache-Control", "no-cache");
response.setDateHeader("Expires", 0);
response.setCharacterEncoding("utf-8");
String origin = request.getHeader("Origin");
if (!StringUtils.isEmpty(origin) && origin.matches(originRegex)) {
response.setHeader("Access-Control-Allow-Origin", origin);
response.setHeader("Access-Control-Allow-Credentials", "true");
response.setHeader("Content-Type", "application/json;charset=utf-8");
response.setHeader("Access-Control-Allow-Methods", "GET, POST, PUT, PATCH, DELETE, HEAD, OPTIONS");
response.setHeader("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept, Access-Token, X-PINGOTHER");
response.setContentType("application/json; charset=utf-8");
}
if (StringUtils.equalsIgnoreCase(request.getMethod(), "options")) {
response.setStatus(200);
return false;
}
return true;
}
}