jq ajax自定义请求头

$.ajax({
	    type: "POST",
	    headers: { 
		Accept: "application/json; charset=utf-8", 
		Token: "xxx"  //这个是自定义的请求头
		},
	    url: "XXX",
	    contentType: "application/json", 
	    data: JSON.stringify(str),//将变量str转为json数据，可忽略
	    dataType: 'json',
	    success: function(result) {
	        if(result.code == 200) {//200：请求成功
	        	consile.log("ok");
	        } 
	    }
	});

 下面是过滤器的一个设置

@Override
	public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)
			throws IOException, ServletException {

        res.setHeader("Access-Control-Allow-Headers", "Content-Type,Token");

        //自定义跨域请求浏览器会先发送一个OPTIONS请求，服务器要对其作出相应，浏览器才会正常发出请求
        if (req.getMethod().equals("OPTIONS")) {
			//设置响应状态码
			res.setStatus(200); 
            return;
        }
}

 到这里完成了配置

 实例

	@Override
	public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)
			throws IOException, ServletException {
		request.setCharacterEncoding("utf-8");
		response.setCharacterEncoding("utf-8");
		
		HttpServletResponse res = (HttpServletResponse) response;
		HttpServletRequest req = (HttpServletRequest) request;
		res.setHeader("Access-Control-Allow-Origin", "*");
		res.setHeader("Access-Control-Allow-Credentials", "true");//是否允许发送Cookie
		res.setHeader("Access-Control-Allow-Methods", "*");
		res.setHeader("Access-Control-Allow-Headers", "Content-Type,Access-Token");
		//对客户端自定义请求头的应答
		res.setHeader("Access-Control-Allow-Headers", "Content-Type,Token");
		
		/**
		 * 针对自定义header问题
		 * 客户端错误:Request header field Token is not allowed by Access-Control-Allow-Headers in preflight response.
		 * 原因:包含自定义header字段的跨域请求，浏览器会先向服务器发送OPTIONS请求，探测该服务器是否允许自定义的跨域字段。
		 * 		如果允许，则继续实际的POST／GET正常请求，否则，返回标题所示错误。
		 */
		if (req.getMethod().equals("OPTIONS")) {
			//设值响应状态码
			res.setStatus(200); 
                    return;
                }
		chain.doFilter(request, response);
	}