配置WebMvcConfigurer全局跨域，不生效的原因及解决办法

最新推荐文章于 2024-07-19 21:48:59 发布

沈学凯@

最新推荐文章于 2024-07-19 21:48:59 发布

阅读量1.2w

点赞数 4

文章标签： spring boot 后端

本文链接：https://blog.csdn.net/qq_41348755/article/details/124153635

版权

先说结论，拦截器会让WebMvcConfigurer全局跨域配置失效，这种情况下可以使用过滤器进行跨域处理。

我在写自己的后端接口时使用了下面的代码来解决跨域，不知道为什么没有生效，有趣的是登录并获取token的login接口却跨域生效了，真的让人头大

@Configuration
public class CorsConfig implements WebMvcConfigurer {
    @Override
    public void addCorsMappings(CorsRegistry registry) {
        registry.addMapping("/**")
                .allowCredentials(true)
                .allowedOrigins("*")
                .allowedMethods(new String[]{"GET", "POST", "PUT", "DELETE"})
                .allowedHeaders("*")
                .exposedHeaders("*");
    }
}

在此附上我的请求拦截器代码：

@Component
public class RequestContextInterceptor implements HandlerInterceptor {
    private final Logger logger = LoggerFactory.getLogger(this.getClass());
    @Autowired
    private LogService logService;
    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
        logService.insertAccessLog(request);
        String token = request.getHeader("Authorization");
        if(Objects.equals(request.getRequestURI(), "/login")){
            return true;
        }
        if(!TokenUtils.verify(token)){
            postInterceptor(response,"token验证失败的访问");
            return false;
        }
        return true;

    }
    protected void postInterceptor(HttpServletResponse response,String message) throws Exception {
        logger.error(message);
        // 如果被拦截，返回信息
        response.setCharacterEncoding("UTF-8");
        response.setContentType("application/json; charset=utf-8");
        ObjectMapper objectMapper = new ObjectMapper();
        response.getWriter().println(objectMapper.writeValueAsString(Response.fail(299, null, "token验证失败")));
        return;
    }
}

能看到因为某些原因拦截器这里是没有对login接口做拦截的，难不成是拦截器与WebMvcConfigurer跨域配置冲突的问题？

果不其然，改为过滤器解决跨域问题之后就解决了，在此附上过滤器跨域代码：

@Component
public class CorsFilter implements Filter {

    @Override
    public void destroy() {

    }

    @Override
    public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain)
            throws IOException, ServletException {

        HttpServletRequest request = (HttpServletRequest) req;
        HttpServletResponse response = (HttpServletResponse) res;

        response.setHeader("Access-Control-Allow-Origin", "*");
        response.setHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS, DELETE");
        response.setHeader("Access-Control-Max-Age", "3600");
        response.setHeader("Access-Control-Allow-Headers", "*");

        chain.doFilter(req, res);

    }

    @Override
    public void init(FilterConfig arg0) throws ServletException {

    }

}