1、第一種：

public class CorsFilter extends OncePerRequestFilter {

static final String ORIGIN = "Origin";

protected void doFilterInternal(

HttpServletRequest request,

HttpServletResponse response,

FilterChain filterChain) throws ServletException, IOException {

String origin = request.getHeader(ORIGIN);

response.setHeader("Access-Control-Allow-Origin", "*");//* or origin as u prefer

response.setHeader("Access-Control-Allow-Credentials", "true");

response.setHeader("Access-Control-Allow-Methods", "PUT, POST, GET, OPTIONS, DELETE");

response.setHeader("Access-Control-Max-Age", "3600");

response.setHeader("Access-Control-Allow-Headers", "content-type, authorization");

if (request.getMethod().equals("OPTIONS"))

response.setStatus(HttpServletResponse.SC_OK);

else

filterChain.doFilter(request, response);

}

}

@Bean

public CorsFilter corsFilter() throws Exception {

return new CorsFilter();

}

http

.addFilterBefore(corsFilter(), UsernamePasswordAuthenticationFilter.class)

.addFilterBefore(authenticationTokenFilterBean(), UsernamePasswordAuthenticationFilter.class)

.headers()

.cacheControl();

2、第二種：

@Configuration

public class CorsConfig {

@Bean

public FilterRegistrationBean corsFilter() {

UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();

CorsConfiguration config = new CorsConfiguration();

config.setAllowCredentials(true);

// 設(shè)置你要允許的網(wǎng)站域名，如果全允許則設(shè)為 *

config.addAllowedOrigin("http://localhost:4200");

// 如果要限制 HEADER 或 METHOD 請自行更改

config.addAllowedHeader("*");

config.addAllowedMethod("*");

source.registerCorsConfiguration("/**", config);

FilterRegistrationBean bean = new FilterRegistrationBean(new CorsFilter(source));

// 這個(gè)順序很重要哦，為避免麻煩請?jiān)O(shè)置在最前

bean.setOrder(0);

return bean;

}

}

參考：

更新 2020-7-8

由于使用了springboot 2.2.5.RELEASE和springcloud Hoxton.SR4，導(dǎo)致跨域?qū)懛ㄓ兴兓?#xff0c;現(xiàn)更新如下：

@EnableWebSecurity

public class WebSecurityConfig extends WebSecurityConfigurerAdapter {

@Override

protected void configure(HttpSecurity http) throws Exception {

http

// by default uses a Bean by the name of corsConfigurationSource

.cors().and()

...

}

@Bean

public CorsFilter corsFilter() {

CorsConfiguration configuration = new CorsConfiguration();

configuration.setAllowedOrigins(Arrays.asList("*"));

configuration.setAllowedMethods(Arrays.asList("GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"));

configuration.setAllowedHeaders(Arrays.asList("authorization", "content-type", "x-auth-token"));

configuration.setExposedHeaders(Arrays.asList("x-auth-token"));

UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();

source.registerCorsConfiguration("/**", configuration);

return new CorsFilter(source);

}

}

或者

@Configuration

public class CorsConfig{

private CorsConfiguration buildConfig() {

CorsConfiguration corsConfiguration = new CorsConfiguration();

corsConfiguration.addAllowedOrigin("*");

corsConfiguration.addAllowedHeader("*");

corsConfiguration.addAllowedMethod("*");

corsConfiguration.setAllowCredentials(true);

return corsConfiguration;

}

@Bean

public CorsFilter corsFilter() {

UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();

source.registerCorsConfiguration("/**", buildConfig());

return new CorsFilter(source);

}

}

總結(jié)

不能把上面的方法CorsFilter corsFilter()改成CorsConfigurationSource corsConfigurationSource()，因?yàn)槲以嚵瞬黄鹱饔?#xff0c;提醒一下各位

我試了網(wǎng)上好多人的方法，但是只有上面的才起作用，分享給大家

參考：

總結(jié)

以上是生活随笔為你收集整理的springboot 添加允许跨域_springboot设置cors跨域请求的两种方式的全部內(nèi)容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網(wǎng)站內(nèi)容還不錯，歡迎將生活随笔推薦給好友。