Browse Source

修改请求跨域

v2
chenrui 2 years ago
parent
commit
9adc4e7361
  1. 17
      lib/EmergencyService/zdxtEmergencyAuthService/src/main/java/com/zdxt/auth/framework/config/CorsFilter.java

17
lib/EmergencyService/zdxtEmergencyAuthService/src/main/java/com/zdxt/auth/framework/config/CorsFilter.java

@ -60,7 +60,7 @@ public class CorsFilter implements Filter {
public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException { public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
//配置可信域名 //配置可信域名
String[] authhosts = {"http://10.132.108.3:85","http://jdm.szssfj.cn","http://localhost:85"}; String[] authhosts = {"http://10.132.108.3:85","http://jdm.szssfj.cn","http://localhost:85","http://192.168.31.146:3301","http://192.168.31.146:85"};
String authost = ""; String authost = "";
HttpServletRequest httprequest = (HttpServletRequest) request; HttpServletRequest httprequest = (HttpServletRequest) request;
String origin = httprequest.getHeader("Origin"); String origin = httprequest.getHeader("Origin");
@ -79,7 +79,8 @@ public class CorsFilter implements Filter {
} }
} }
httpresponse.addHeader("Access-Control-Allow-Origin", authost); // httpresponse.addHeader("Access-Control-Allow-Origin", authost);
httpresponse.addHeader("Access-Control-Allow-Origin", "*");
httpresponse.addHeader("Access-Control-Allow-Methods", httpresponse.addHeader("Access-Control-Allow-Methods",
"GET, POST"); "GET, POST");
httpresponse.addHeader("Access-Control-Allow-Headers", httpresponse.addHeader("Access-Control-Allow-Headers",
@ -90,12 +91,12 @@ public class CorsFilter implements Filter {
httpresponse.addHeader("X-Frame-Options", "SAMEORIGIN"); httpresponse.addHeader("X-Frame-Options", "SAMEORIGIN");
// res.addHeader("Access-Control-Allow-Headers", "Content-Type,X-CAF-Authorization-Token,sessionToken,X-TOKEN"); // res.addHeader("Access-Control-Allow-Headers", "Content-Type,X-CAF-Authorization-Token,sessionToken,X-TOKEN");
// TODO 暂时允许options 判断请求方法是否为OPTIONS // TODO 暂时允许options 判断请求方法是否为OPTIONS
if (((HttpServletRequest) request).getMethod().equals("OPTIONS")) { // if (((HttpServletRequest) request).getMethod().equals("OPTIONS")) {
// 设置响应头信息,禁止OPTIONS请求 // // 设置响应头信息,禁止OPTIONS请求
httpresponse.setHeader("Allow", "GET, POST, HEAD, PUT, DELETE"); // httpresponse.setHeader("Allow", "GET, POST, HEAD, PUT, DELETE");
httpresponse.setStatus(HttpServletResponse.SC_METHOD_NOT_ALLOWED); // httpresponse.setStatus(HttpServletResponse.SC_METHOD_NOT_ALLOWED);
return; // return;
} // }
chain.doFilter(request, response); chain.doFilter(request, response);
} }

Loading…
Cancel
Save