java后端跨域处理

309 阅读1分钟

全局跨域处理

package com.test.config;

import org.springframework.context.annotation.Configuration;
import org.springframework.web.servlet.config.annotation.CorsRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurerAdapter;

/**
 * @Description 全局跨域处理(测试环境或生产环境nginx配置跨域后, 服务端不应再设置跨域, 否则会出现两次跨域设置, 跨域不生效问题)
 * @Author xy
 * @Date 2021/5/7 18:15
 **/
@Configuration
public class WebConfig extends WebMvcConfigurerAdapter {


    /**
     * @param registry
     * @return void
     * @Description 配置全局跨域处理
     * @Author xy
     * @Date 2021/5/7 18:15
     **/
    @Override
    public void addCorsMappings(CorsRegistry registry) {
        registry.addMapping("/**")
                .allowedOrigins("*")
                .allowedMethods("POST", "GET", "PUT", "OPTIONS", "DELETE")
                .maxAge(3600)
                .allowCredentials(true);
    }
}

方法跨域处理

package com.test.controller;

import io.swagger.annotations.Api;
import io.swagger.annotations.ApiOperation;
import org.springframework.validation.annotation.Validated;
import org.springframework.web.bind.annotation.PostMapping;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RestController;

import javax.servlet.http.HttpServletResponse;

/**
 * @Description 跨域测试
 * @Author xy
 * @Date 2021/5/7 18:13
 **/
@Api(tags = "测试")
@RestController
@RequestMapping(value = "/test")
public class TestController extends BaseFdController {
    /**
     * @param response
     * @return java.lang.String
     * @Description 方法跨域处理
     * @Author xy
     * @Date 2021/5/7 18:13
     **/
    @ApiOperation("跨域测试")
    @PostMapping(value = "/test")
    @Validated
    public String test(HttpServletResponse response) {
        // 响应头设置
        response.setHeader("Access-Control-Allow-Headers", "Origin,X-Requested-With,Content-Type,Accept");
        // 指定允许其他域名访问
        response.addHeader("Access-Control-Allow-Origin", "*");
        // 响应类型
        response.addHeader("Access-Control-Allow-Methods", "POST, GET, DELETE, OPTIONS, DELETE");
        // 最大值设置
        response.addHeader("Access-Control-Max-Age", "1000");
        return null;
    }
}