后端解决方案

1. 服务端设置Response Header(响应头部)的Access-Control-Allow-Origin（Java开发中可以使用Filter进行设置）；
2. 继承使用Spring Web的CorsFilter（适用于Spring MVC、Spring Boot）
3. 实现WebMvcConfigurer接口（适用于Spring Boot）

1. 实现WebMvcConfigurer接口

import org.springframework.context.annotation.Configuration;
import org.springframework.web.servlet.config.annotation.CorsRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;

@Configuration
public class CorsConfig implements WebMvcConfigurer {

    @Override
    public void addCorsMappings(CorsRegistry registry){
        registry.addMapping("/**")
                .allowedOriginPatterns("*")
                .allowedMethods("GET","HEAD","POST","PUT","DELETE","OPTIONS")
                .allowCredentials(true)
                .maxAge(3600)
                .allowedHeaders("*");
    }

}

2.使用Filter方式进行设置

@WebFilter
public class CorsFilter implements Filter {  
    // 日志对象
    private static Logger logger = LoggerFactory.getLogger(CorsFilter.class);  

    @Override
    public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain) throws IOException, ServletException {  
        HttpServletResponse response = (HttpServletResponse) res;  
        response.setHeader("Access-Control-Allow-Origin", "*");  
        response.setHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS, DELETE");  
        response.setHeader("Access-Control-Max-Age", "3600");  
        response.setHeader("Access-Control-Allow-Headers", "x-requested-with");  
        chain.doFilter(req, res);  
    }  

    public void init(FilterConfig filterConfig) {

    }  

    public void destroy() {

    }  
}  

3. 继承使用Spring Web中的CorsFilter

import org.springframework.stereotype.Component;
import org.springframework.web.cors.CorsConfiguration;
import org.springframework.web.cors.UrlBasedCorsConfigurationSource;
import org.springframework.web.filter.CorsFilter;

import java.util.Arrays;

/**
 *  跨域访问配置
 *
 *  @author wanji
 */
@Component
public class CustomCorsFilter extends CorsFilter {

    public CustomCorsFilter() {
        super(configurationSource());
    }

    private static UrlBasedCorsConfigurationSource configurationSource() {
        CorsConfiguration config = new CorsConfiguration();
        config.setAllowCredentials(true);
        config.addAllowedOrigin("*");
        config.addAllowedHeader("*");
        config.setMaxAge(36000L);
        config.setAllowedMethods(Arrays.asList("GET", "HEAD", "POST", "PUT", "DELETE", "OPTIONS"));
        UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
        source.registerCorsConfiguration("/v1/**", config);
        return source;
    }
}

基于SpringBoot后端解决跨域问题

• ①基于方法的跨域解决方案加@CrossOrigin注解

  •   @GetMapping("/test")
      @CrossOrigin
      public list<User> getUser(){
          return userService.list();
      }
    

• ②基于过滤器的方式统一解决跨域问题

  •   @Configuration
      public class CrosConf{
          @Bean
          public CorsFilter corsFilter(){
              CorsConfiguration corsConfiguration=new CorsConfiguration();
              corsConfiguration.addAllowedOrigin("*");
              corsConfiguration.addAllowedHeader("*");
              corsConfiguration.addAllowedMethod("*");
              UrlBasedCorsConfigurationSource source=new UrlBasedCorsConfigurationSource();
              source.registerCorsConfiguration("/**",corsConfiguration);
              return new CorsFilter(source);
          }
      }
    

• ③重写addCorsMappings方法解决跨域问题

  •   @Configuration
      public class CorsConf implements WebMvcConfigurer{
          @Override
          public void addCorsMappings (CorsRegistry registry){
              registry.addMapping("/**")
                      .allowedOriginPatterns("*")
                      .allowedMethods("GET","PUT","POST","DELETE","HEAD","OPTIONS")
                      .allowCredentials(true)
                      .maxAge(3600)
                      .allowedHeaders("*");
          }
      }
    

1.通过配置cors协议解决跨域
在springboot中 可以在控制器当中添加注解@CrossOrigin 该注解的属性value=”“，填入地址，多个地址逗号分开，或者填入 * ，表示所有域名都可访问。属性maxAge，也就是Cookie的有效期 单位为秒。

 2.写一个配置类达到全局解决的目的