nginx配置cors

Ethan3014

于 2019-12-23 15:56:55 发布

阅读量525

点赞数

CC 4.0 BY-SA版权

本文链接：https://blog.youkuaiyun.com/weixin_45594127/article/details/103667221

    server {
        listen       80;
        server_name  localhost;

        add_header 'Access-Control-Allow-Origin' $http_origin always;
        add_header 'Access-Control-Allow-Credentials' 'true' always;
        add_header 'Access-Control-Allow-Headers' 'Authorization,Content-Type,Accept,Origin,User-Agent,DNT,Cache-Control,X-Mx-ReqToken,X-Requested-With' always;
        add_header 'Access-Control-Allow-Methods' 'GET,POST,OPTIONS' always;

        if ( $request_method = 'OPTIONS' ) {
            return 204;
        }
        //......
    }

注意，当’Access-Control-Allow-Credentials’ 'true’的时候，Access-Control-Allow-Origin不可以为*，因为*不允许发送cookie，必须为请求者的Origin header