filter的配置支持跨域

最新推荐文章于 2025-02-24 18:58:40 发布

原创最新推荐文章于 2025-02-24 18:58:40 发布 · 896 阅读

0 ·

CC 4.0 BY-SA版权

本文详细介绍了CORSFilter的配置与实现，该过滤器用于处理跨域资源共享（CORS）请求，通过设置响应头允许特定的源进行跨域访问，支持多种HTTP方法，并允许携带cookie。文章展示了如何在Spring框架中注册并使用此过滤器。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

/**
* @copy right Dossp Company All rights reserved
* @Title: CORSFilter.java
* @Date: 2018-07-04 14:21
* @Package com.dossp.common.filter
*/
package com.dossp.common.filter;

import org.springframework.context.annotation.Configuration;
import org.springframework.core.annotation.Order;

import javax.servlet.*;
import javax.servlet.annotation.WebFilter;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;

/**
* @author yufenghui
* </p>
* 日期：2018-07-04 14:21
* </p>
* 描述：
*
*/
@WebFilter(filterName = "CORSFilter", urlPatterns = {"/*"})
@Order(value = 1)
@Configuration
public class CORSFilter implements Filter {

@Override
public void init(FilterConfig filterConfig) throws ServletException {

}

@Override
public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {

HttpServletRequest request = (HttpServletRequest) servletRequest;
HttpServletResponse response = (HttpServletResponse) servletResponse;
response.setHeader("Access-Control-Allow-Origin", request.getHeader("Origin"));
response.setHeader("Access-Control-Allow-Methods", "POST, GET, PUT, OPTIONS, DELETE");
response.setHeader("Access-Control-Max-Age", "3600");
response.setHeader("Access-Control-Allow-Headers", "x-requested-with");
response.setHeader("Access-Control-Allow-Credentials","true"); //是否支持cookie跨域
filterChain.doFilter(servletRequest, servletResponse);

}

@Override
public void destroy() {

}