跨域问题

痛定思痛。 2021-09-01 04:42 534阅读 0赞

使用vue访问springboot java后台api时候，出现错误：

已拦截跨源请求：同源策略禁止读取位于 https://xxxxi/xxx/xx/xxxi/adxx 的远程资源。（原因：CORS 头缺少 'Access-Control-Allow-Origin'）。
    
    已拦截跨源请求：同源策略禁止读取位于https://xxxxi/xxx/xx/xxxi/adxx 的远程资源。（原因：CORS 请求未能成功）。

解决办法：  
1.在方法或者类上添加一个“@CrossOrigin“注解就可以实现对当前的跨域访问了  
@CrossOrigin在jdk1.8及以上版本才可以使用

2.在启动类Application中配置

private CorsConfiguration buildConfig() {
           //写法1
    		CorsConfiguration corsConfiguration = new CorsConfiguration();
    		corsConfiguration.addAllowedOrigin("*");
    		corsConfiguration.addAllowedHeader("*");
     	    corsConfiguration.addAllowedMethod("*");
    		corsConfiguration.addExposedHeader("x-auth-token");
    		corsConfiguration.addExposedHeader("x-total-count");
    		return corsConfiguration;
    		//写法2
    		CorsConfiguration corsConfig = new CorsConfiguration();
            List<String> allowedHeaders = Arrays.asList("x-auth-token","x-total-count", "content-type", "X-Requested-With", "XMLHttpRequest");
            List<String> exposedHeaders = Arrays.asList("x-auth-token","x-total-count", "content-type", "X-Requested-With", "XMLHttpRequest");
            List<String> allowedMethods = Arrays.asList("POST", "GET", "DELETE", "PUT", "OPTIONS");
    //        List<String> allowedOrigins = Arrays.asList("*");
            corsConfig.setAllowedHeaders(allowedHeaders);
            corsConfig.setAllowedMethods(allowedMethods);
            corsConfig.addAllowedOrigin("*");
            corsConfig.setExposedHeaders(exposedHeaders);
            corsConfig.setMaxAge(36000L);
            corsConfig.setAllowCredentials(true);
            return corsConfig;
    	}
    
    	/**
    	 * 跨域过滤器
    	 *
    	 * @return
    	 */
    	@Bean
    	public CorsFilter corsFilter() {
    		UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
    		source.registerCorsConfiguration("/**", buildConfig());
    		return new CorsFilter(source);
    	}