Springboot設置跨域的三種方式

方式一(精細配置)

在須要跨域的整個Controller或者單個方法上添加@CrossOrigin註解

方式二(全局配置)

第一種寫法

import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.cors.CorsConfiguration;
import org.springframework.web.cors.UrlBasedCorsConfigurationSource;
import org.springframework.web.filter.CorsFilter;

@Configuration
public class CorsConfig {

    private CorsConfiguration buildConfig() {
        CorsConfiguration corsConfiguration = new CorsConfiguration();
        corsConfiguration.addAllowedOrigin("*"); // 1容許任何域名使用
        corsConfiguration.addAllowedHeader("*"); // 2容許任何頭
        corsConfiguration.addAllowedMethod("*"); // 3容許任何方法（post、get等）
        return corsConfiguration;
    }

    @Bean
    public CorsFilter corsFilter() {
        UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
        source.registerCorsConfiguration("/**", buildConfig()); // 4
        return new CorsFilter(source);
    }
}
第二種寫法

@Configuration
public class WebMvcConfig extends WebMvcConfigurerAdapter {
　　@Override
　　public void addCorsMappings(CorsRegistry registry) {
　　　　registry.addMapping("/**")
　　　　.allowedOrigins("*")
　　　　.allowedMethods("POST", "GET", "PUT", "OPTIONS", "DELETE")
　　　　.maxAge(3600)
　　　　.allowCredentials(true);
　　}
}

方式三(經過filter)

@Component
@WebFilter(urlPatterns = "/*", filterName = "authFilter") //這裏的「/*」 表示的是須要攔截的請求路徑
public class PassHttpFilter implements Filter {
　　@Override
　　public void init(FilterConfig filterConfig) throws ServletException { }
　　@Override
　　public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {
　　　　HttpServletResponse httpResponse = (HttpServletResponse)servletResponse;
　　　　httpResponse.setHeader("Access-Control-Allow-Headers","Origin, X-Requested-With, Content-Type, Accept");
　　　　httpResponse.setHeader("Access-Control-Allow-Credentials", "true");
　　　　httpResponse.addHeader("Access-Control-Allow-Origin", "http://127.0.0.1:8080");
　　　　filterChain.doFilter(servletRequest, httpResponse);
　　}
　　@Override
　　public void destroy() { }
}