前后端分离如何解决Origin跨域问题？！

现基于SpringMvc拦截器进行处理跨域问题,需要解决跨域问题的所有Controller(控制层)都必须经过该拦截器!

import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.web.method.HandlerMethod;
import org.springframework.web.servlet.HandlerInterceptor;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

/**
 * @ClassName: CosyFansCrossOriginHandlerInterceptor
 * @Description: 跨域拦截器（理论上所有请求都必须）
 * @Author: Jason jasonaszp@163.com
 * @Date: 2018/10/11 11:19
 */
public class CrossOriginHandlerInterceptor implements HandlerInterceptor {

    /**
     * 日志服务
     */
    @Autowired
    private MsOnionLoggerAdapter msOnionLoggerAdapter;

    /**
     * 请求前拦截
     *
     * @param httpServletRequest  httpServletRequest
     * @param httpServletResponse httpServletResponse
     * @param o                   拦截对象
     * @return true通过，flase请求结束
     * @throws Exception 拦截发生异常
     */
    public boolean preHandle(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse, Object o) throws Exception {

        return setCrossOrigin(httpServletRequest, httpServletResponse, o);

    }

    /**
     * set跨域cookie共享请求头
     *
     * @param request  HttpServletRequest
     * @param response HttpServletResponse
     * @param handler  handler
     * @return true
     */
    protected boolean setCrossOrigin(HttpServletRequest request, HttpServletResponse response, Object handler) {

        try {

            String origin = request.getHeader("Origin");
            if (origin == null) {
                origin = request.getHeader("Referer");
            }
            // 允许指定域访问跨域资源
            response.setHeader("Access-Control-Allow-Origin", origin);
            // 允许客户端携带跨域cookie，此时origin值不能为“*”，只能为指定单一域名
            response.setHeader("Access-Control-Allow-Credentials", "true");

            if ("OPTIONS" .equals(request.getMethod())) {
                String allowMethod = request.getHeader("Access-Control-Request-Method");
                String allowHeaders = request.getHeader("Access-Control-Request-Headers");
                // 浏览器缓存预检请求结果时间,单位:秒
                response.setHeader("Access-Control-Max-Age", "86400");
                // 允许浏览器在预检请求成功之后发送的实际请求方法名
                response.setHeader("Access-Control-Allow-Methods", allowMethod);
                // 允许浏览器发送的请求消息头
                response.setHeader("Access-Control-Allow-Headers", allowHeaders);
            }
        } catch (Exception e) {
            HandlerMethod handlerMethod = (HandlerMethod) handler;
            msOnionLoggerAdapter.error(this.getClass().getName(), e, "跨域拦截器,路径为: "
                    + handlerMethod.getBeanType() + MsOnionConstants.DASH + handlerMethod.getMethod().getName());
            return false;
        }
        return true;
    }

}