SpringSecurity与Shiro框架整合的跨域配置问题

最新推荐文章于 2025-04-10 14:33:29 发布

何沐阳（qq2206952220）

最新推荐文章于 2025-04-10 14:33:29 发布

阅读量372

点赞数

分类专栏：软件开发

本文链接：https://blog.youkuaiyun.com/qq_41904061/article/details/115371935

版权

本文介绍了在SpringSecurity与Shiro整合时遇到的跨域配置问题，特别是关于复杂请求和Token验证的问题。当前端Ajax请求报401错误时，发现过滤器无法获取到Token。解决方案包括：后端调整接收请求头参数或在配置中增加允许的头（Access-Control-Allow-Headers）。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

场景描述：

@Component
@Slf4j
@Scope("prototype")
public class OAuth2Filter extends AuthenticatingFilter {

    @Autowired
    private ThreadLocalToken localToken;

    @Value("${hrmanage.jwt.cache-expire}")
    private int cacheExpire;

    @Autowired
    private RedisTemplate redisTemplate;

    @Autowired
    private JwtUtil jwtUtil;

    /**
     * 返回封装好的token对象
     * @param servletRequest
     * @param servletResponse
     * @return
     * @throws Exception
     */
    @Override
    protected AuthenticationToken createToken(ServletRequest servletRequest, ServletResponse servletResponse) throws Exception {

        HttpServletRequest httpServletRequest = (HttpServletRequest) servletRequest;
        String token = getRequestToken(httpServletRequest);
        if(StrUtil.isBlank(token)){
            return null;
        }
        return new OAuth2Token(token);
    }

    /**
     * 放行options请求
     * @param request
     * @param response
     * @param mappedValue
     * @return
     */
    @Override
    protected boolean isAccessAllowed(ServletRequest request, ServletResponse response, Object mappedValue) {
        System.out.println("这是isAccessAllowed方法");
        HttpServletRequest httpServletRequest = (HttpServletRequest) request;
        if (httpServletRequest.getMethod().equals(RequestMethod.OPTIONS.name())){
            System.out.println("这是isAccessAllowed方法中的true");
            return true;
        }
        System.out.println("这是isAccessAllowed方法中的true");
        return false;
    }

    @Override
    protected boolean onAccessDenied(ServletRequest servletRequest, ServletResponse servletResponse) throws Exception {
        System.out.println("这是onAccessDenied方法");
        HttpServletRequest httpServletRequest = (HttpServ

最低0.47元/天解锁文章