springboot+springcloud 处理cors跨域问题

服务端：

import org.springframework.context.annotation.Configuration;
import org.springframework.web.servlet.config.annotation.CorsRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;

/**
 * 跨域配置
 * @date Aug 16, 2019
 */
@Configuration
public class CorsConfig implements WebMvcConfigurer {

    @Override
    public void addCorsMappings(CorsRegistry registry) {
        registry.addMapping("/**")	// 允许跨域访问的路径
        .allowedOrigins("*")	// 允许跨域访问的源
        .allowedMethods("POST", "GET", "PUT", "OPTIONS", "DELETE")	// 允许请求方法
        .maxAge(168000)	// 预检间隔时间
        .allowedHeaders("*") // 允许头部设置
        .allowCredentials(true);	// 是否发送cookie
    }
}

gateway网关端：

import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity;
import org.springframework.security.config.annotation.web.reactive.EnableWebFluxSecurity;
import org.springframework.security.config.web.server.ServerHttpSecurity;

import org.springframework.security.web.server.SecurityWebFilterChain;
import org.springframework.security.web.server.ServerAuthenticationEntryPoint;
import org.springframework.web.cors.CorsConfiguration;
import org.springframework.web.cors.reactive.CorsWebFilter;
import org.springframework.web.cors.reactive.UrlBasedCorsConfigurationSource;

/**
 * @Data 2019.7.30
 * @Description TODO
 * @Version 1.0.0
 */
@Configuration
@EnableWebFluxSecurity
@EnableGlobalMethodSecurity(prePostEnabled = true)
public class WebFluxSecurityConfig {

    @Autowired
    private ServerAuthenticationEntryPoint unauthorizedAuthenticationEntryPoint;

    @Bean
    SecurityWebFilterChain webFluxSecurityFilterChain(ServerHttpSecurity http) throws Exception {
        http.cors().and().csrf().disable()
                .authorizeExchange()
                .pathMatchers("/api/**").authenticated()
                .pathMatchers("/**").permitAll()
                .and().exceptionHandling().authenticationEntryPoint(unauthorizedAuthenticationEntryPoint)
                /*and().headers().frameOptions().disable().*/
                .and().headers().cache();
        return http.build();
    }


    /**
     * 定义跨域配置
     * @return
     */
    @Bean
    CorsWebFilter corsWebFilter () {
        UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
        CorsConfiguration config = new CorsConfiguration();
        config.setAllowCredentials(true);
        config.addAllowedOrigin(CorsConfiguration.ALL);
        config.addAllowedHeader(CorsConfiguration.ALL);
        config.addAllowedMethod(CorsConfiguration.ALL);
        source.registerCorsConfiguration("/**", config);
        return new CorsWebFilter(source);
    }
}

没有网关的情况下，用第一种解决方法，有网关的情况下，使用第二种解决方法，且不和与每一种方法同用，否则会报多个Allow-Origin错误