Spring3使用CORS解决跨域请求的配置

最新推荐文章于 2025-05-20 10:33:08 发布

hkhhkb

最新推荐文章于 2025-05-20 10:33:08 发布

阅读量3.2k

点赞数

CC 4.0 BY-SA版权

分类专栏： spring相关文章标签： spring filter CORS跨域

本文链接：https://blog.youkuaiyun.com/hkhhkb/article/details/78806569

spring相关专栏收录该内容

7 篇文章

订阅专栏

本文介绍了一种通过在Spring3中实现自定义过滤器来解决跨域请求问题的方法。该过滤器能够设置HTTP响应头，允许指定的源进行跨域访问，并支持特定的HTTP方法和头部信息。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

Spring3使用CORS解决跨域请求的配置

1.以下是过滤器的代码：

/**
 * CORS过滤器
 * 
 * @author hkb <br>
 */
public class CorsFilter implements Filter {

    /*
     * @see javax.servlet.Filter#init(javax.servlet.FilterConfig)
     */
    public void init(FilterConfig filterConfig) throws ServletException {

    }

    /*
     * @see javax.servlet.Filter#doFilter(javax.servlet.ServletRequest,
     * javax.servlet.ServletResponse, javax.servlet.FilterChain)
     */
    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)
            throws IOException, ServletException {
        HttpServletResponse httpServletResponse = (HttpServletResponse) response;
        httpServletResponse.setHeader("Access-Control-Allow-Origin", "*");
        httpServletResponse.setHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS, DELETE");
        httpServletResponse.setHeader("Access-Control-Max-Age", "3600");
        httpServletResponse.setHeader("Access-Control-Allow-Headers",
                "Content-Type, Access-Control-Allow-Headers, Authorization, X-Requested-With");
        httpServletResponse.setHeader("Access-Control-Allow-Credentials", "true");// 允许cookie
        chain.doFilter(request, response);
    }

    /*
     * @see javax.servlet.Filter#destroy()
     */
    public void destroy() {

    }

}

2.以下是web.xml中的配置

<!-- CORS过滤器start -->
    <filter>
        <filter-name>corsFilter</filter-name>
        <filter-class>org.food.filter.CorsFilter</filter-class>
    </filter>
    <filter-mapping>
        <filter-name>corsFilter</filter-name>
        <url-pattern>*.do</url-pattern>
    </filter-mapping>
<!-- CORS过滤器end -->