SpringBoot解决Cookie设置（无需修改谷歌浏览器）

最新推荐文章于 2024-12-18 22:39:29 发布

原创最新推荐文章于 2024-12-18 22:39:29 发布 · 2.8k 阅读

0 ·

CC 4.0 BY-SA版权

Spring Boot 专栏收录该内容

3 篇文章

订阅专栏

本文介绍如何在SpringBoot中设置Cookie，包括通过Ajax发送带有凭证的请求、在后端Controller层添加Cookie以及在过滤器中配置跨域设置。具体步骤涉及使用withCredentials参数、设置Cookie属性及MaxAge，并在过滤器中指定允许的源、方法和头部。

SpringBoot解决Cookie设置（无需修改谷歌浏览器）

1、Ajax 设置 withCredentials = true。
2、SpringBoot后端在Controller层传 Cookie。

    @RequestMapping("/login")
    @ResponseBody
    public String login( HttpServletResponse response) throws UnsupportedEncodingException {
        Cookie cookie = new Cookie("name", "tangjiahui");
        cookie.setMaxAge(24 * 60 * 60 * 60);
        response.addCookie(cookie);
        return "this is login api.";
    }

3、过滤器里面设置允许源：（注意：必须域名和后端接口域名一致，端口可以不一样）（如：前端localhost:9001和后端 localhost:8001）


@Component
public class CorsFilter implements Filter {

    @Override
    public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain) throws IOException, ServletException {
        HttpServletResponse response = (HttpServletResponse) res;
        HttpServletRequest reqs = (HttpServletRequest) req;

        // 请求的源:
        String origin= reqs.getHeader("Origin");
        response.setHeader("Access-Control-Allow-Origin", origin);
        response.setHeader("Access-Control-Allow-Credentials", "true");
        response.setHeader("Access-Control-Allow-Methods", "POST, GET, PATCH, DELETE, PUT");
        response.setHeader("Access-Control-Max-Age", "3600");
        response.setHeader("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept");
        chain.doFilter(req, res);
    }

    @Override
    public void init(FilterConfig filterConfig) {
    }

    @Override
    public void destroy() {
    }
}