java filter 跨域_JAVA Servlet过滤器实现跨域拦截与控制

JAVA Servlet过滤器实现跨域拦截与控制

定义Filter

public class CORSFilter implements Filter {

public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain) throws IOException, ServletException {

HttpServletResponse response = (HttpServletResponse) res;

response.setHeader("Access-Control-Allow-Origin", "");

response.setHeader("Access-Control-Allow-Methods", "POST, GET, PUT, OPTIONS, DELETE");

response.setHeader("Access-Control-Max-Age", "3600");

response.setHeader("Access-Control-Allow-Headers", "x-requested-with, Content-Type");

response.setHeader("Access-Control-Allow-Credentials", "true");

chain.doFilter(req, res);

}

public void init(FilterConfig filterConfig) {}

public void destroy() {}

}

2.多站点访问跨域问题解决

/**

* 解决跨域问题

*/

public class SimpleCORSFilter implements Filter {

public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain) throws IOException, ServletException {

HttpServletResponse response = (HttpServletResponse) res;

String []  allowDomain= {"http://127.0.0.1:1841","http://192.168.1.178"};

SetallowedOrigins= new HashSet(Arrays.asList(allowDomain));

String originHeader=((HttpServletRequest) req).getHeader("Origin");

if (allowedOrigins.contains(originHeader)) {

response.setHeader("Access-Control-Allow-Origin", originHeader);

response.setHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS, DELETE");

response.setHeader("Access-Control-Max-Age", "3600");

response.setHeader("Access-Control-Allow-Headers", "content-type, x-requested-with");

response.setHeader("Access-Control-Allow-Credentials", "true");

}

chain.doFilter(req, res);

}