CORS on Nginx

qwfys200

已于 2023-05-26 17:21:47 修改

阅读量297

点赞数

CC 4.0 BY-SA版权

分类专栏： Project 文章标签： nginx cors

于 2019-04-23 20:54:37 首次发布

知识在分享中升华，思想在交流中沉淀。

本文链接：https://blog.youkuaiyun.com/qwfys200/article/details/89480967

Project 专栏收录该内容

23 篇文章

订阅专栏

本文详细介绍了一种广泛使用的Nginx配置，该配置能够实现跨域资源共享（CORS），并支持预检请求。通过设置特定的HTTP头部，如Access-Control-Allow-Origin、Access-Control-Allow-Methods等，Nginx可以对GET、POST和OPTIONS方法进行有效控制，确保了不同源的资源请求得以顺利进行。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

The following Nginx configuration enables CORS, with support for preflight requests.

#
# Wide-open CORS config for nginx
#
location / {
     if ($request_method = 'OPTIONS') {
        add_header 'Access-Control-Allow-Origin' '*';
        add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
        #
        # Custom headers and headers various browsers *should* be OK with but aren't
        #
        add_header 'Access-Control-Allow-Headers' 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range';
        #
        # Tell client that this pre-flight info is valid for 20 days
        #
        add_header 'Access-Control-Max-Age' 1728000;
        add_header 'Content-Type' 'text/plain; charset=utf-8';
        add_header 'Content-Length' 0;
        return 204;
     }
     if ($request_method = 'POST') {
        add_header 'Access-Control-Allow-Origin' '*';
        add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
        add_header 'Access-Control-Allow-Headers' 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range';
        add_header 'Access-Control-Expose-Headers' 'Content-Length,Content-Range';
     }
     if ($request_method = 'GET') {
        add_header 'Access-Control-Allow-Origin' '*';
        add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
        add_header 'Access-Control-Allow-Headers' 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range';
        add_header 'Access-Control-Expose-Headers' 'Content-Length,Content-Range';
     }
}

Source: Michiel Kalkman, https://michielkalkman.com/snippets/nginx-cors-open-configuration.html