后端解决跨域问题！！_redirected from 'h-优快云博客

本文链接：https://blog.youkuaiyun.com/qq_55622403/article/details/133233090

文章讲述了在SpringBoot应用中，遇到XMLHttpRequest跨域访问被阻止的问题，通过添加CorsConfig类并配置`allowedOrigin`,`allowedHeader`,和`allowedMethod`来解决CORS策略冲突，允许特定来源的请求头和方法。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

Access to XMLHttpRequest at 'http://localhost:8081/user/getPages?pageNum=0&pageSize=2' from origin 'http://localhost:8080' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

在Springboot加上corsConfig配置类，之后重启解决


import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.cors.CorsConfiguration;
import org.springframework.web.cors.UrlBasedCorsConfigurationSource;
import org.springframework.web.filter.CorsFilter;


@Configuration
public class Config {

    // 当前跨域请求最大有效时长。这里默认1天
    private static final long MAX_AGE = 24 * 60 * 60;

    @Bean
    public CorsFilter corsFilter() {
        UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
        CorsConfiguration corsConfiguration = new CorsConfiguration();
        corsConfiguration.addAllowedOrigin("http://localhost:8080"); // 1 设置访问源地址
        corsConfiguration.addAllowedHeader("*"); // 2 设置访问源请求头
        corsConfiguration.addAllowedMethod("*"); // 3 设置访问源请求方法
        corsConfiguration.setMaxAge(MAX_AGE);
        source.registerCorsConfiguration("/**", corsConfiguration); // 4 对接口配置跨域设置
        return new CorsFilter(source);
    }
}