https://www.cnblogs.com/antLaddie/p/14751540.html
1：配置CorsFilter(全局跨域)
import org.springframework.boot.SpringBootConfiguration;import org.springframework.context.annotation.Bean;import org.springframework.web.cors.CorsConfiguration;import org.springframework.web.cors.UrlBasedCorsConfigurationSource;import org.springframework.web.filter.CorsFilter;/** * @Author AnHui_XiaoYang
* @Email 939209948@qq.com
* @Date 2021/5/10 17:07
* @Description
*/@SpringBootConfigurationpublicclass WebGlobalConfig {
@Bean
public CorsFilter corsFilter() {
//创建CorsConfiguration对象后添加配置CorsConfiguration config =new CorsConfiguration();
//设置放行哪些原始域 config.addAllowedOrigin("*");
//放行哪些原始请求头部信息config.addAllowedHeader("*");
//暴露哪些头部信息config.addExposedHeader("*");
//放行哪些请求方式config.addAllowedMethod("GET");//getconfig.addAllowedMethod("PUT");//putconfig.addAllowedMethod("POST");//postconfig.addAllowedMethod("DELETE");//delete
//corsConfig.addAllowedMethod("*"); //放行全部请求
//是否发送Cookieconfig.setAllowCredentials(true);
//2. 添加映射路径UrlBasedCorsConfigurationSource corsConfigurationSource =new UrlBasedCorsConfigurationSource();
corsConfigurationSource.registerCorsConfiguration("/**", config);
//返回CorsFilterreturnnew CorsFilter(corsConfigurationSource);
}
}
如果你使用的是高版本SpringBoot2.4.4则需要改动一下，否则后台报错
java.lang.IllegalArgumentException: When allowCredentials is true, allowedOrigins cannot contain the special value "*" since that cannot be set on the "Access-Control-Allow-Origin" response header. To allow credentials to a set of origins, list them explicitly or consider using "allowedOriginPatterns" instead.
at org.springframework.web.cors.CorsConfiguration.validateAllowCredentials(CorsConfiguration.java:453) ~[spring-web-5.3.6.jar:5.3.6]
当allowCredentials为true时，alloedOrigins不能包含特殊值“*”，因为该值不能在“Access-Control-Allow-Origin”响应头部中设置。要允许凭据访问一组来源，请显式列出它们或考虑改用“AllowedOriginPatterns”。
解决：把 config.addAllowedOrigin("*"); 替换成 config.addAllowedOriginPattern("*");
2：重写WebMvcConfigurer（全局跨域）
import org.springframework.boot.SpringBootConfiguration;import org.springframework.web.servlet.config.annotation.CorsRegistry;import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;/** * @Author AnHui_XiaoYang
* @Email 939209948@qq.com
* @Date 2021/5/10 17:49
* @Description
*/@SpringBootConfigurationpublicclassCorsConfigimplements WebMvcConfigurer {
@Override
publicvoid addCorsMappings(CorsRegistry registry) {
//添加映射路径registry.addMapping("/**")
//是否发送Cookie.allowCredentials(true)
//设置放行哪些原始域 SpringBoot2.4.4下低版本使用.allowedOrigins("*") .allowedOriginPatterns("*")
//放行哪些请求方式.allowedMethods(newString[]{"GET", "POST", "PUT", "DELETE"})
//.allowedMethods("*") //或者放行全部
//放行哪些原始请求头部信息.allowedHeaders("*")
//暴露哪些原始请求头部信息.exposedHeaders("*");
}
}
