springboot中增加跨域过滤器

最新推荐文章于 2025-03-28 20:03:48 发布

不言而喻i

最新推荐文章于 2025-03-28 20:03:48 发布

阅读量822

点赞数

CC 4.0 BY-SA版权

分类专栏： springboot

本文链接：https://blog.youkuaiyun.com/yu_hongrun/article/details/81945185

springboot 专栏收录该内容

6 篇文章

订阅专栏

本文介绍了一种使用Spring框架实现的CORS跨域处理配置方法。通过定义一个名为CORSFilter的过滤器，该过滤器允许所有来源的请求，并设置跨域请求的相关头部信息，包括允许的方法、头部、凭证等。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

package com.metro.configure;

import org.springframework.stereotype.Component;
import org.springframework.web.filter.OncePerRequestFilter;

import javax.servlet.*;
import javax.servlet.annotation.WebFilter;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;


/**
 * CORS跨域处理配置
 */
@Component
@WebFilter(urlPatterns = {"/*"}, filterName = "ocrsFilter")
public class CORSFilter implements Filter {

    @Override
    public void init(FilterConfig filterConfig) throws ServletException {

    }

    @Override
    public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {
        HttpServletRequest request = (HttpServletRequest) servletRequest;
        HttpServletResponse response = (HttpServletResponse) servletResponse;
        response.addHeader("Access-Control-Allow-Origin", request.getHeader("Origin"));
        response.addHeader("Access-Control-Allow-Methods", "*");
        response.addHeader("Access-Control-Allow-Headers", "Content-Type");
        //TODO 开启 cookie跨域
        response.setHeader("Access-Control-Allow-Credentials", "true");
        //TODO 有效期30分钟
        response.addHeader("Access-Control-Max-Age", "1800");
        //response.addHeader("Access-Control-Expose-Headers", "token");
        //response.setHeader("token", "111111111111111");
        filterChain.doFilter(request, response);
    }

    @Override
    public void destroy() {

    }
}