Spring Boot实现跨域

最新推荐文章于 2025-11-30 16:57:49 发布

原创最新推荐文章于 2025-11-30 16:57:49 发布 · 235 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#Spring Boot #跨域 #CORS

Java 同时被 2 个专栏收录

21 篇文章

订阅专栏

后端框架

12 篇文章

订阅专栏

本文介绍了一种跨域拦截器的实现方式，通过创建CrossOriginFilter类并重写doFilter方法，设置响应头来实现跨域请求的支持。该拦截器还记录了请求处理的时间，并对特定的请求方法进行了特殊处理。

部署运行你感兴趣的模型镜像

跨域拦截器：CrossOriginFilter.java

package com.dirk.demo.controller.filter;

import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import javax.servlet.*;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
import java.math.BigDecimal;
import java.text.DecimalFormat;
import java.text.NumberFormat;

/**
 * @Author: Dirk
 * @Description: 跨域拦截器
 * @Date: Created at 13:39 2018/4/14
 */

public class CrossOriginFilter implements Filter {

    private String allowOrigin;

    private static final Logger logger = LoggerFactory.getLogger(CrossOriginFilter.class);
    public static final NumberFormat FORMAT = new DecimalFormat("0.000");

    @Override
    public void init(FilterConfig filterConfig) throws ServletException {
        allowOrigin = filterConfig.getInitParameter("allowOrigin");
    }

    @Override
    public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain) throws IOException, ServletException {
        long begin = System.currentTimeMillis();

        HttpServletResponse response = (HttpServletResponse) res;
        response.setHeader("Access-Control-Allow-Origin", allowOrigin);
        response.setHeader("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE, OPTIONS");
        response.setHeader("Access-Control-Allow-Credentials", "true");
        response.setHeader("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept, Authorization");
        if ("OPTIONS".equals(((HttpServletRequest) req).getMethod())) {
            logger.warn("options method");
            response.sendError(202, "options method");
            return;
        }
        chain.doFilter(req, res);


        if (logger.isInfoEnabled()) {
            long end = System.currentTimeMillis();
            BigDecimal processed = new BigDecimal(end - begin).divide(new BigDecimal(1000));
            String uri = ((HttpServletRequest) req).getRequestURI();
            //login.do 作为负载均衡健康检查的url,打印日志的话,日志量会很大
            if (!uri.equals("/login.do")) {
                logger.info("Processed in {} second(s). URI={}", FORMAT.format(processed), uri);
            }
        }
    }

    @Override
    public void destroy() {

    }
}

注册

package com.dirk.doorlock;

import com.dirk.doorlock.controller.filter.CrossOriginFilter;
import org.springframework.boot.SpringApplication;
import org.springframework.boot.autoconfigure.SpringBootApplication;
import org.springframework.boot.web.servlet.FilterRegistrationBean;
import org.springframework.context.annotation.Bean;

@SpringBootApplication
public class DoorlockApplication {

    public static void main(String[] args) {
        SpringApplication.run(DoorlockApplication.class, args);
    }

    @Bean
    public FilterRegistrationBean crossOriginFilterRegistration() {

        FilterRegistrationBean registration = new FilterRegistrationBean();
        registration.setFilter(new CrossOriginFilter());
        registration.addUrlPatterns("*");
        registration.addInitParameter("allowOrigin", "*");
        registration.setName("CrossOriginFilter");
        registration.setOrder(1);
        return registration;
    }

}