前后端分离中浏览器请求跨域的headers取不到值的问题

最近做了个token认证，是前后端分离，大致思路就是用户登陆，成功之后返回token,放在本地sessionstorage中，之后，前端做强求拦截，对于之后的请求，将token信息附加到请求头中。

       为了使请求头中Authorization可以被后端获取到，跨域时候做了如下设置：

@Component
@Order(1)
public class AllowOriginFilter implements Filter {
 
    public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain) throws IOException, ServletException {
 
        HttpServletResponse response = (HttpServletResponse) res;
        HttpServletRequest request=(HttpServletRequest)req;
        response.setHeader("Access-Control-Allow-Origin", "*");
        response.setHeader("Access-Control-Allow-Methods", "POST,GET,PUT,OPTIONS,DELETE");
        response.setHeader("Access-Control-Max-Age", "3600");
        response.setHeader("Access-Control-Allow-Headers", "Origin,X-R