前后端分离项目自定义请求头CORS跨域问题

最新推荐文章于 2024-07-23 14:36:42 发布

devtommy

最新推荐文章于 2024-07-23 14:36:42 发布

阅读量1.7k

点赞数

分类专栏：前后端分离文章标签： spring ajax跨域问题

本文链接：https://blog.csdn.net/qq_51960163/article/details/119682857

版权

前后端分离专栏收录该内容

1 篇文章 0 订阅

订阅专栏

前后端分离项目中需要自定义请求头token安全的传输秘钥，前端的自定义秘钥会被；浏览器看做是一个跨域问题，如果不解决将会报CORS，检查后端的拦截器有没有错误：

package com.tommy.common;

import javax.servlet.*;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;

public class SimpleCORSFilter implements Filter {
    private boolean isCross = false;

    @Override
    public void destroy() {
        isCross = false;
    }

    @Override
    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)
            throws IOException, ServletException {
        if (isCross) {
            HttpServletRequest httpServletRequest = (HttpServletRequest) request;
            HttpServletResponse httpServletResponse = (HttpServletResponse) response;
            System.out.println("拦截请求: " + httpServletRequest.getServletPath());
            httpServletResponse.setHeader("Access-Control-Allow-Origin", "*");
            httpServletResponse.setHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS, DELETE");
            httpServletResponse.setHeader("Access-Control-Max-Age", "0");
            httpServletResponse.setHeader("Access-Control-Allow-Headers",
                    "Origin, No-Cache, X-Requested-With, If-Modified-Since, Pragma, Last-Modified, Cache-Control, Expires, Content-Type, X-E4M-With,userId,token,username,identity");
            httpServletResponse.setHeader("Access-Control-Allow-Credentials", "true");
            httpServletResponse.setHeader("XDomainRequestAllowed", "1");
        }
        chain.doFilter(request, response);
    }

    @Override
    public void init(FilterConfig filterConfig) throws ServletException {
        String isCrossStr = filterConfig.getInitParameter("IsCross");
        isCross = isCrossStr.equals("true") ? true : false;
        System.out.println(isCrossStr);
        System.out.println("这是isCross======" + isCross + "==============");
    }

}

发现缺少了配置字段：username 和 identity （本项目的业务需要在请求头中添加identity和username自定义的请求变量，所以要设置中加上这两个key :httpServletResponse.setHeader("Access-Control-Allow-Headers", "Origin, No-Cache, X-Requested-With, If-Modified-Since, Pragma, Last-Modified, Cache-Control, Expires, Content-Type, X-E4M-With,userId,token,username,identity");）

完美解决因请求头的跨域问题，我是tommy，如果有什么问题欢迎批评指正。