Java后台设置允许跨站点请求

当跨域请求报如下错误：

问题描述：
Access to XMLHttpRequest at ‘http://127.0.0.1/yshdApi/’ from origin ‘http://localhost:8080’ has been blocked by CORS policy: Request header field content-type is not allowed by Access-Control-Allow-Headers in preflight response.

具体原因：Request header field content-type is not allowed by Access-Control-Allow-Headers in preflight response

预运行响应中的访问控制允许头不允许请求头字段内容类型，也就是我们的请求head中包含了不允许的字段内容。

原因：
包含自定义header字段的跨域请求，浏览器会先向服务器发送OPTIONS请求，探测该服务器是否允许自定义的跨域字段。如果允许，则继续实际的POST／GET正常请求，否则，返回标题所示错误。

解决办法：
可通过添加过滤器实现整个系统允许跨站点请求。

import java.io.IOException;

import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletResponse;

/**
   *@ClassName: CrossFilter
   *@Description: TODO
   *@author:lfp
   *@date: 2019年7月23日 下午7:08:02 
 **/
public class CrossFilter implements Filter{

	@Override
	public void destroy() {
		// TODO Auto-generated method stub

	}
	@Override
	public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain)
			throws IOException, ServletException {
		HttpServletResponse response = (HttpServletResponse) res;
		//跨域请求，*代表允许全部类型
	    response.setHeader("Access-Control-Allow-Origin", "*");  
	    
	    response.setContentType("application/json;charset=UTF-8");
	  //允许请求方式
	    response.setHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS, DELETE");  
	  //用来指定本次预检请求的有效期，单位为秒，在此期间不用发出另一条预检请求
	    response.setHeader("Access-Control-Max-Age", "3600"); 
	  //请求包含的字段内容，如有多个可用哪个逗号分隔如下
	    response.setHeader("Access-Control-Allow-Headers", "Origin, X-Requested-With,x-requested-with, Content-Type, Accept, client_id, uuid, Authorization");
	  //  response.setHeader("Access-Control-Allow-Headers", "x-requested-with"); 
		//访问控制允许凭据，true为允许
		response.setHeader("Access-Control-Allow-Credentials", "true");
  
        if (request.getMethod().equals("OPTIONS")) {
            HttpUtil.setResponse(response, HttpStatus.OK.value(), null);
            return;
        }
		chain.doFilter(req, res); 
	}
	@Override
	public void init(FilterConfig arg0) throws ServletException {

	}
}

参考：https://blog.csdn.net/daren0017/article/details/85128601