From 9adc4e73610ce20a93b95c213ffa0f7077bcc204 Mon Sep 17 00:00:00 2001 From: chenrui <1950717904@qq.com> Date: Wed, 3 Jul 2024 09:30:26 +0800 Subject: [PATCH] =?UTF-8?q?=E4=BF=AE=E6=94=B9=E8=AF=B7=E6=B1=82=E8=B7=A8?= =?UTF-8?q?=E5=9F=9F?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../zdxt/auth/framework/config/CorsFilter.java | 17 +++++++++-------- 1 file changed, 9 insertions(+), 8 deletions(-) diff --git a/lib/EmergencyService/zdxtEmergencyAuthService/src/main/java/com/zdxt/auth/framework/config/CorsFilter.java b/lib/EmergencyService/zdxtEmergencyAuthService/src/main/java/com/zdxt/auth/framework/config/CorsFilter.java index 0a3a839a..029a9843 100644 --- a/lib/EmergencyService/zdxtEmergencyAuthService/src/main/java/com/zdxt/auth/framework/config/CorsFilter.java +++ b/lib/EmergencyService/zdxtEmergencyAuthService/src/main/java/com/zdxt/auth/framework/config/CorsFilter.java @@ -60,7 +60,7 @@ public class CorsFilter implements Filter { public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException { //配置可信域名 - String[] authhosts = {"http://10.132.108.3:85","http://jdm.szssfj.cn","http://localhost:85"}; + String[] authhosts = {"http://10.132.108.3:85","http://jdm.szssfj.cn","http://localhost:85","http://192.168.31.146:3301","http://192.168.31.146:85"}; String authost = ""; HttpServletRequest httprequest = (HttpServletRequest) request; String origin = httprequest.getHeader("Origin"); @@ -79,7 +79,8 @@ public class CorsFilter implements Filter { } } - httpresponse.addHeader("Access-Control-Allow-Origin", authost); +// httpresponse.addHeader("Access-Control-Allow-Origin", authost); + httpresponse.addHeader("Access-Control-Allow-Origin", "*"); httpresponse.addHeader("Access-Control-Allow-Methods", "GET, POST"); httpresponse.addHeader("Access-Control-Allow-Headers", @@ -90,12 +91,12 @@ public class CorsFilter implements Filter { httpresponse.addHeader("X-Frame-Options", "SAMEORIGIN"); // res.addHeader("Access-Control-Allow-Headers", "Content-Type,X-CAF-Authorization-Token,sessionToken,X-TOKEN"); // TODO 暂时允许options 判断请求方法是否为OPTIONS - if (((HttpServletRequest) request).getMethod().equals("OPTIONS")) { - // 设置响应头信息，禁止OPTIONS请求 - httpresponse.setHeader("Allow", "GET, POST, HEAD, PUT, DELETE"); - httpresponse.setStatus(HttpServletResponse.SC_METHOD_NOT_ALLOWED); - return; - } +// if (((HttpServletRequest) request).getMethod().equals("OPTIONS")) { +// // 设置响应头信息，禁止OPTIONS请求 +// httpresponse.setHeader("Allow", "GET, POST, HEAD, PUT, DELETE"); +// httpresponse.setStatus(HttpServletResponse.SC_METHOD_NOT_ALLOWED); +// return; +// } chain.doFilter(request, response); }