diff --git a/lib/EmergencyService/zdxtEmergencyAuthService/src/main/java/com/zdxt/auth/framework/config/CorsFilter.java b/lib/EmergencyService/zdxtEmergencyAuthService/src/main/java/com/zdxt/auth/framework/config/CorsFilter.java index 0a3a839a..029a9843 100644 --- a/lib/EmergencyService/zdxtEmergencyAuthService/src/main/java/com/zdxt/auth/framework/config/CorsFilter.java +++ b/lib/EmergencyService/zdxtEmergencyAuthService/src/main/java/com/zdxt/auth/framework/config/CorsFilter.java @@ -60,7 +60,7 @@ public class CorsFilter implements Filter { public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException { //配置可信域名 - String[] authhosts = {"http://10.132.108.3:85","http://jdm.szssfj.cn","http://localhost:85"}; + String[] authhosts = {"http://10.132.108.3:85","http://jdm.szssfj.cn","http://localhost:85","http://192.168.31.146:3301","http://192.168.31.146:85"}; String authost = ""; HttpServletRequest httprequest = (HttpServletRequest) request; String origin = httprequest.getHeader("Origin"); @@ -79,7 +79,8 @@ public class CorsFilter implements Filter { } } - httpresponse.addHeader("Access-Control-Allow-Origin", authost); +// httpresponse.addHeader("Access-Control-Allow-Origin", authost); + httpresponse.addHeader("Access-Control-Allow-Origin", "*"); httpresponse.addHeader("Access-Control-Allow-Methods", "GET, POST"); httpresponse.addHeader("Access-Control-Allow-Headers", @@ -90,12 +91,12 @@ public class CorsFilter implements Filter { httpresponse.addHeader("X-Frame-Options", "SAMEORIGIN"); // res.addHeader("Access-Control-Allow-Headers", "Content-Type,X-CAF-Authorization-Token,sessionToken,X-TOKEN"); // TODO 暂时允许options 判断请求方法是否为OPTIONS - if (((HttpServletRequest) request).getMethod().equals("OPTIONS")) { - // 设置响应头信息,禁止OPTIONS请求 - httpresponse.setHeader("Allow", "GET, POST, HEAD, PUT, DELETE"); - httpresponse.setStatus(HttpServletResponse.SC_METHOD_NOT_ALLOWED); - return; - } +// if (((HttpServletRequest) request).getMethod().equals("OPTIONS")) { +// // 设置响应头信息,禁止OPTIONS请求 +// httpresponse.setHeader("Allow", "GET, POST, HEAD, PUT, DELETE"); +// httpresponse.setStatus(HttpServletResponse.SC_METHOD_NOT_ALLOWED); +// return; +// } chain.doFilter(request, response); }