跨域问题的产生和解决方安

最新推荐文章于 2024-06-05 00:40:27 发布

han-yi

最新推荐文章于 2024-06-05 00:40:27 发布

阅读量308

点赞数 1

文章标签：前端 http java

本文链接：https://blog.csdn.net/qq_43578058/article/details/122493322

版权

跨域问题

跨域问题产生的原因是因为浏览器的同源策略, 同源指的是端口号, 域名, 协议都相同
浏览器为了安全问题一般都限制了跨域访问，也就是不允许跨域请求资源

解决方方法 CORS(Cross-Origin Resource Sharing 跨域资源分享)

通过设置响应头 , 告诉给浏览器, 允许跨域请求

import org.springframework.context.annotation.Configuration;
import javax.servlet.*;
import javax.servlet.annotation.WebFilter;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
@WebFilter(filterName = "CorsFilter ")
@Configuration
public class CorsFilter implements Filter {
    @Override
    public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain) throws IOException, ServletException {
        HttpServletResponse response = (HttpServletResponse) res;
        response.setHeader("Access-Control-Allow-Origin","*");
        response.setHeader("Access-Control-Allow-Credentials", "true");
        response.setHeader("Access-Control-Allow-Methods", "POST, GET, PATCH, DELETE, PUT");
        response.setHeader("Access-Control-Max-Age", "3600");
        response.setHeader("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept");
        chain.doFilter(req, res);
    }
}

@CrossOrigin 注解, 这个注解可在类上使用,表示所有的接口允许跨域, 在方法上使用,表示当前接口跨域

public class GoodsController {
@CrossOrigin(origins = "http://localhost:4000")
@GetMapping("goods-url")
public Response queryGoodsWithGoodsUrl(@RequestParam String goodsUrl) throws Exception {}
}

3.添加过滤器 corsFilter 允许跨域的过滤器

/**
 * 跨域支持
 */
@Configuration
public class CorsConfig {

    @Bean
    public CorsWebFilter corsFilter() {
        CorsConfiguration config = new CorsConfiguration();
        config.addAllowedMethod("*");
        config.addAllowedOrigin("*");
        config.addAllowedHeader("*");
        UrlBasedCorsConfigurationSource source =
                new UrlBasedCorsConfigurationSource(new PathPatternParser());
        source.registerCorsConfiguration("/**", config);
        return new CorsWebFilter(source);
    }
}

网关中可以通过globalcors , 添加全局的跨域配置

 globalcors: #解决跨域问题（模板）
        add-to-simple-url-handler-mapping: true
        corsConfigurations:
          '[/**]':
            allowedHeaders: "*"
            allowedOrigins: "*"
            allowedMethods:
            - GET
            - POST
            - DELETE
            - PUT
            - OPTION