jquery ajax 设置header踩得坑

$("#test").click(function() {
     $.ajax({
         type: "GET",
         url: "url",
         beforeSend: function(request) {
            request.setRequestHeader("token","******");
         },
         success: function(result) {
             alert(result);
         }
     });
 });

很简单的ajax请求，因为涉及到跨域，服务器我也做了处理

1、@CrossOrigin(origins = "*", maxAge = 3600)

2、 //支持跨域请求
    @Override
    public void addCorsMappings(CorsRegistry registry) {
        registry.addMapping("/**")
                .allowedOrigins("*")
                .allowCredentials(true)
                .allowedMethods("GET", "POST", "DELETE", "PUT")
                .maxAge(3600);
    }

3、response.setHeader("Access-Control-Allow-Origin", "*");  
        response.setHeader("Access-Control-Allow-Methods", "POST, GET, PUT, OPTIONS, DELETE");  
        response.setHeader("Access-Control-Max-Age", "3600");  
        response.setHeader("Access-Control-Allow-Headers", "x-requested-with, Content-Type");  
        response.setHeader("Access-Control-Allow-Credentials", "true");  

这三种方法都没成功 普通方法可以获取，但是拦截器获取不到token 然后看了https://blog.youkuaiyun.com/qq_35860138/article/details/85340769这篇文章最后才得到解决 拦截器里面加了这段代码

if (httpServletRequest.getMethod().equals("OPTIONS")) {
    httpServletResponse.setStatus(HttpServletResponse.SC_OK);
    return true;
}