|
|
@ -60,7 +60,7 @@ public class CorsFilter implements Filter { |
|
|
|
|
|
|
|
|
public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException { |
|
|
public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException { |
|
|
//配置可信域名
|
|
|
//配置可信域名
|
|
|
String[] authhosts = {"http://10.132.108.3:85","http://jdm.szssfj.cn","http://localhost:85"}; |
|
|
String[] authhosts = {"http://10.132.108.3:85","http://jdm.szssfj.cn","http://localhost:85","http://192.168.31.146:3301","http://192.168.31.146:85"}; |
|
|
String authost = ""; |
|
|
String authost = ""; |
|
|
HttpServletRequest httprequest = (HttpServletRequest) request; |
|
|
HttpServletRequest httprequest = (HttpServletRequest) request; |
|
|
String origin = httprequest.getHeader("Origin"); |
|
|
String origin = httprequest.getHeader("Origin"); |
|
|
@ -79,7 +79,8 @@ public class CorsFilter implements Filter { |
|
|
} |
|
|
} |
|
|
} |
|
|
} |
|
|
|
|
|
|
|
|
httpresponse.addHeader("Access-Control-Allow-Origin", authost); |
|
|
// httpresponse.addHeader("Access-Control-Allow-Origin", authost);
|
|
|
|
|
|
httpresponse.addHeader("Access-Control-Allow-Origin", "*"); |
|
|
httpresponse.addHeader("Access-Control-Allow-Methods", |
|
|
httpresponse.addHeader("Access-Control-Allow-Methods", |
|
|
"GET, POST"); |
|
|
"GET, POST"); |
|
|
httpresponse.addHeader("Access-Control-Allow-Headers", |
|
|
httpresponse.addHeader("Access-Control-Allow-Headers", |
|
|
@ -90,12 +91,12 @@ public class CorsFilter implements Filter { |
|
|
httpresponse.addHeader("X-Frame-Options", "SAMEORIGIN"); |
|
|
httpresponse.addHeader("X-Frame-Options", "SAMEORIGIN"); |
|
|
// res.addHeader("Access-Control-Allow-Headers", "Content-Type,X-CAF-Authorization-Token,sessionToken,X-TOKEN");
|
|
|
// res.addHeader("Access-Control-Allow-Headers", "Content-Type,X-CAF-Authorization-Token,sessionToken,X-TOKEN");
|
|
|
// TODO 暂时允许options 判断请求方法是否为OPTIONS
|
|
|
// TODO 暂时允许options 判断请求方法是否为OPTIONS
|
|
|
if (((HttpServletRequest) request).getMethod().equals("OPTIONS")) { |
|
|
// if (((HttpServletRequest) request).getMethod().equals("OPTIONS")) {
|
|
|
// 设置响应头信息,禁止OPTIONS请求
|
|
|
// // 设置响应头信息,禁止OPTIONS请求
|
|
|
httpresponse.setHeader("Allow", "GET, POST, HEAD, PUT, DELETE"); |
|
|
// httpresponse.setHeader("Allow", "GET, POST, HEAD, PUT, DELETE");
|
|
|
httpresponse.setStatus(HttpServletResponse.SC_METHOD_NOT_ALLOWED); |
|
|
// httpresponse.setStatus(HttpServletResponse.SC_METHOD_NOT_ALLOWED);
|
|
|
return; |
|
|
// return;
|
|
|
} |
|
|
// }
|
|
|
chain.doFilter(request, response); |
|
|
chain.doFilter(request, response); |
|
|
} |
|
|
} |
|
|
|
|
|
|
|
|
|