关于addCorsMappings跨域配置不生效问题概述

原配置

/**
 * @Author: huangqh
 * @Date: 2020/3/6 10:17
 */
@Configuration
public class CorsConfiguration {
    @Bean
    public WebMvcConfigurer corsConfigurer(){
        return new WebMvcConfigurer() {
            @Override
            public void addCorsMappings(CorsRegistry registry) {
                registry.addMapping("/**")
                        .allowedOrigins("*")
                        .allowedHeaders("*")
                        .allowCredentials(true)
                        .allowedMethods("GET", "POST", "PUT", "DELETE","OPTIONS","HEAD");
            }
        };
    }
}

错误消息

经过测试，只能传递在HandlerInterceptorAdapter 实现类中获取的消息头才可以传递，发生原因应该是请求经过的先后顺序问题，当请求到来时会先进入拦截器中，而不是进入Mapping映射中，所以返回的头信息中并没有配置的跨域信息。浏览器就会报跨域异常。

解决办法

public class CorsFilter implements  Filter  {

	@Override
	public void init(FilterConfig filterConfig) throws ServletException {


    }

	@Override
	public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain)
			throws IOException, ServletException {

		 HttpServletResponse response = (HttpServletResponse) res;
		 HttpServletRequest request = (HttpServletRequest) req;
        response.setHeader("x-frame-options", "SAMEORIGIN");
        // 不使用*，自动适配跨域域名，避免携带Cookie时失效
		 String origin = request.getHeader("Origin");
        if (StringUtils.isNotBlank(origin)) {
			 response.setHeader("Access-Control-Allow-Origin", origin); }
		 // 自适应所有自定义头
        String headers = request.getHeader("Access-Control-Request-Headers");
		 if(StringUtils.isNotBlank(headers)) {
             response.setHeader("Access-Control-Allow-Headers", headers);
             response.setHeader("Access-Control-Expose-Headers", headers);
         }
		 // 允许跨域的请求方法类型
        response.setHeader("Access-Control-Allow-Methods", "*");
		 // 预检命令（OPTIONS）缓存时间，单位：秒
        response.setHeader("Access-Control-Max-Age", "3600");
        // 明确许可客户端发送Cookie，不允许删除字段即可
		 response.setHeader("Access-Control-Allow-Credentials", "true");
		 chain.doFilter(request, response);
	}

	@Override
	public void destroy() {

    }