spring-boot CORS跨域的配置

最新推荐文章于 2025-06-09 14:24:00 发布

原创最新推荐文章于 2025-06-09 14:24:00 发布 · 169 阅读

1 ·

CC 4.0 BY-SA版权

博客介绍了几个与跨域请求相关的响应头。“Access-Control-Allow-Origin”允许发起跨域请求；“Access-Control-Max-Age”可在3600秒内缓存结果，无需再发预检验请求；“Access-Control-Allow-Methods”允许GET、PUT、DELETE外域请求；“Access-Control-Allow-Headers”允许跨域请求含content-type头。

"Access-Control-Allow-Origin"表明它允许发起跨域请求

"Access-Control-Max-Age"表明在3600秒内，不需要再发送预检验请求，可以缓存该结果

"Access-Control-Allow-Methods"表明它允许GET、PUT、DELETE的外域请求

"Access-Control-Allow-Headers"表明它允许跨域请求包含content-type头

public class CorsConfig extends WebMvcConfigurerAdapter {

    @Bean
    public CorsFilter corsFilter() {
        final UrlBasedCorsConfigurationSource urlBasedCorsConfigurationSource = new UrlBasedCorsConfigurationSource();
        final CorsConfiguration corsConfiguration = new CorsConfiguration();
        corsConfiguration.setAllowCredentials(true);
        corsConfiguration.addAllowedOrigin("*");
        corsConfiguration.addAllowedHeader("*");
        corsConfiguration.addAllowedMethod("*");
        urlBasedCorsConfigurationSource.registerCorsConfiguration("/**", corsConfiguration);
        return new CorsFilter(urlBasedCorsConfigurationSource);
    }

}