Spring解决跨域问题

方式一.@CrossOrigin

环境：jdk8+ spring4.2+

controller层

	@CrossOrigin(origins = "*", maxAge = 3600)
	@RequestMapping(value = "/test", method = RequestMethod.POST)
	@ResponseBody
复制代码

origins：允许可访问的域列表

maxAge：准备响应前的缓存持续的最大时间（以秒为单位）。

前端正常ajax就行了

问题：不要通过nginx负载，否则失效

方式二.Filter(繁琐)

环境：jdk8+ spring4.2+

web.xml配置

	<filter>
		<filter-name>CORSFilter</filter-name>
		<filter-class>com.test.CORSFilter</filter-class>
		<init-param>
			<param-name>IsCross</param-name>
			<param-value>true</param-value>
		</init-param>
	</filter>
	<filter-mapping>
		<filter-name>CORSFilter</filter-name>
		<url-pattern>/*</url-pattern>
	</filter-mapping>
复制代码

springmvc的配置

	<mvc:cors>
		<mvc:mapping path="/**" allowed-origins="*"
			allowed-methods="POST, GET, OPTIONS, DELETE, PUT"
			allowed-headers="Content-Type, Access-Control-Allow-Headers, Authorization, X-Requested-With"
			allow-credentials="true" />
	</mvc:cors>
复制代码

4.2一下的版本主要更改xml头

 http://www.springframework.org/schema/mvc http://www.springframework.org/schema/mvc/spring-mvc-4.2.xsd
复制代码

拦截器类

package com.utils;

import java.io.IOException;

import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

public class CORSFilter implements Filter{
	   private boolean isCross = false;

	    @Override
	    public void destroy() {
	        isCross = false;
	    }

	    @Override
	    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)
	            throws IOException, ServletException {
	        if (isCross) {
	            HttpServletRequest httpServletRequest = (HttpServletRequest) request;
	            HttpServletResponse httpServletResponse = (HttpServletResponse) response;
	            System.out.println("拦截请求: " + httpServletRequest.getServletPath());
	            httpServletResponse.setHeader("Access-Control-Allow-Origin", "*");
	            httpServletResponse.setHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS, DELETE");
	            httpServletResponse.setHeader("Access-Control-Max-Age", "0");
	            httpServletResponse.setHeader("Access-Control-Allow-Headers",
	                    "Origin, No-Cache, X-Requested-With, If-Modified-Since, Pragma, Last-Modified, Cache-Control, Expires, Content-Type, X-E4M-With,userId,token");
	            httpServletResponse.setHeader("Access-Control-Allow-Credentials", "true");
	            httpServletResponse.setHeader("XDomainRequestAllowed", "1");
	        }
	        chain.doFilter(request, response);
	    }

	    @Override
	    public void init(FilterConfig filterConfig) throws ServletException {
	        String isCrossStr = filterConfig.getInitParameter("IsCross");
	        isCross = isCrossStr.equals("true") ? true : false;
	        System.out.println(isCrossStr);
	    }
}

复制代码

*代表所有 可以用确定的url替代

前端正常ajax就行了

问题：不要通过nginx负载，否则失效

转载于:https://juejin.im/post/5b2c6cbaf265da59be0f7fdb