CORS全局跨域设置

方法一

使用注解对接口进行跨域设置

@CrossOrigin(origins = "*", maxAge = 3600)
@RestController
@RequestMapping("/test")
public class TestController {
  
    @GetMapping("get")
    public String get() {
        // ...
    }
  
}

方法二

直接实现实现WebMvcConfigurer

@Configuration
public class CorsConfig implements WebMvcConfigurer {
  /**
    * 前端response中的自定义header信息默认同一域中可见
    * 在crossdomain跨域情况下需要在服务器端增加Access-Control-Expose-Headers的支持
    * 例如在springboot中需要使用addExposedHeader添加指定返回头：
    * @return
    */
   private CorsConfiguration buildConfig() {
      CorsConfiguration corsConfiguration = new CorsConfiguration();
      corsConfiguration.addAllowedOrigin("*");//允许跨域的域名，可以用*表示允许任何域名使用
      corsConfiguration.addAllowedHeader("*");//允许任何请求头
      corsConfiguration.addAllowedMethod("*");//允许任何方法（post、get等）
      corsConfiguration.addExposedHeader("Authorization");
      return corsConfiguration;
   }
​
​
   @Bean
   public CorsFilter corsFilter() {
      UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
      source.registerCorsConfiguration("/**", buildConfig());
      return new CorsFilter(source);
   }
​
   @Override
   public void addCorsMappings(CorsRegistry registry) {
      registry.addMapping("/**")
            .allowedOrigins("*")
//          .allowCredentials(true)
            .allowedMethods("GET", "POST", "DELETE", "PUT")
            .maxAge(3600);
   }
​
}

方法三

实现一个过滤器Filter

import org.springframework.core.Ordered;
import org.springframework.core.annotation.Order;
import org.springframework.stereotype.Component;
​
import javax.servlet.*;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
​
/**
 * @author Administrator
 */
@Component
@Order(Ordered.HIGHEST_PRECEDENCE)
public class MyCorsFilter implements Filter {
​
    public MyCorsFilter() {
    }
​
    @Override
    public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain) throws IOException, ServletException {
        HttpServletResponse response = (HttpServletResponse) res;
        HttpServletRequest request = (HttpServletRequest) req;
        response.setHeader("Access-Control-Allow-Origin", "*");
        response.setHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS, DELETE");
        response.setHeader("Access-Control-Max-Age", "3600");
        response.setHeader("Access-Control-Allow-Headers", "Content-Type,x-requested-with, authorization");
​
        if ("OPTIONS".equalsIgnoreCase(request.getMethod())) {
            response.setStatus(HttpServletResponse.SC_OK);
        } else {
            chain.doFilter(req, res);
        }
    }
​
    @Override
    public void init(FilterConfig filterConfig) {
    }
​
    @Override
    public void destroy() {
    }
}