后台支持跨域

最新推荐文章于 2023-10-24 14:53:03 发布

我小叮当无可奈何

最新推荐文章于 2023-10-24 14:53:03 发布

阅读量775

点赞数

CC 4.0 BY-SA版权

分类专栏：基础文章标签：跨域

本文链接：https://blog.youkuaiyun.com/qq_33407429/article/details/99328952

基础专栏收录该内容

37 篇文章

订阅专栏

本文详细介绍了跨域问题的后台配置解决方案，通过实现一个自定义的过滤器CorsFilter，设置HTTP响应头，允许指定源进行跨域请求，支持POST、GET、OPTIONS、DELETE等方法，同时允许携带凭据，确保了跨域请求的安全性和灵活性。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

跨域后台配置

import java.io.IOException;

import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

public class CorsFilter implements Filter{
	 public void init(FilterConfig filterConfig) {
	    }

	    public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain) throws IOException, ServletException {
	        HttpServletResponse response = (HttpServletResponse) res;

	        HttpServletRequest reqs = (HttpServletRequest) req;

	        response.setHeader("Access-Control-Allow-Origin", reqs.getHeader("Origin"));
	        response.setHeader("Access-Control-Allow-Credentials", "true");
	        response.setHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS, DELETE");
	        response.setHeader("Access-Control-Max-Age", "3600");
	        response.setHeader("Access-Control-Allow-Headers", "x-requested-with,Content-Type,XFILENAME,XFILECATEGORY,XFILESIZE");
	        chain.doFilter(req, res);
	    }

	    public void destroy() {
	    }

}

web.xml

    <filter>
        <filter-name>cors</filter-name>
        <filter-class>CorsFilter文件的路径</filter-class>
    </filter>
    <filter-mapping>
        <filter-name>cors</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>