跨域问题、过滤器中设置响应头

最新推荐文章于 2025-06-21 11:28:57 发布

AmbroseLe

最新推荐文章于 2025-06-21 11:28:57 发布

阅读量1.5k

点赞数 1

CC 4.0 BY-SA版权

分类专栏： java基础 spring boot 文章标签：跨域问题响应头

本文链接：https://blog.youkuaiyun.com/qq_32786139/article/details/85334790

java基础同时被 2 个专栏收录

50 篇文章

订阅专栏

spring boot

37 篇文章

订阅专栏

本文详细介绍了如何处理Web应用中的跨域问题，通过在过滤器中设置响应头来允许特定源的请求，确保安全的数据交换。同时，讨论了相关安全策略和实现跨域资源共享(CORS)的方法。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

在过滤器中设置响应头

import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.stereotype.Component;

import javax.servlet.*;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;

/**
 * Description TODO 在过滤器中设置响应头
 */
@Component
public class CrossDomainFilter implements Filter
{
    private static Logger logger = LoggerFactory
            .getLogger(CrossDomainFilter.class);

    @Override
    public void destroy()
    {

    }

    @Override
    public void doFilter(ServletRequest request, ServletResponse response,
                         FilterChain chain) throws IOException, ServletException
    {
        HttpServletRequest req = (HttpServletRequest) request;
        HttpServletResponse rep = (HttpServletResponse) response;

        //设置允许跨域的配置
        // 这里填写你允许进行跨域的主机ip（正式上线时可以动态配置具体允许的域名和IP）
        rep.setHeader("Access-Control-Allow-Origin", req.getHeader("Origin"));
        rep.setHeader("Access-Control-Allow-Origin", "*");
        // 允许的访问方法
        rep.setHeader("Access-Control-Allow-Methods", "POST, GET, PUT, OPTIONS, DELETE, PATCH");
        // Access-Control-Max-Age 用于 CORS 相关配置的缓存
        rep.setHeader("Access-Control-Max-Age", "3600");
        rep.setHeader("Access-Control-Allow-Headers", "token,Origin, X-Requested-With, Content-Type, Accept");
        response.setCharacterEncoding("UTF-8");
        response.setContentType("application/json; charset=utf-8");
        String token = req.getHeader("token");//header方式
        //ResultInfo resultInfo = new ResultInfo();
        boolean isFilter = false;

        String method = ((HttpServletRequest) request).getMethod();
        rep.setStatus(HttpServletResponse.SC_OK);
        chain.doFilter(request, response);

    }

    @Override
    public void init(FilterConfig arg0) throws ServletException
    {

    }
}