CorsFilter 过滤器解决跨域的处理

CorsFilter 过滤器如何解决跨域

不多逼逼，直接贴代码，前端所有请求头都放在headers里面就行

@Componentpublic class CorsFilter {    //这里是前端请求头,那个跨域就添加到这里就行了    private static final String headers = "User-Agent,Cache-Control,Content-type,Date,Server,withCredentials," +            "appversion";    @Override    public void init(FilterConfig filterConfig)            throws ServletException {    }    @Override    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)            throws IOException, ServletException {        HttpServletResponse httpServletResponse = (HttpServletResponse) response;        httpServletResponse.setHeader("Access-Control-Allow-Origin", "*");        httpServletResponse.setHeader("Access-Control-Allow-Headers", headers);        httpServletResponse.setHeader("Access-Control-Allow-Credentials", "true");        httpServletResponse.setHeader("Access-Control-Allow-Methods",                "GET, POST, PUT, DELETE, OPTIONS, HEAD");        httpServletResponse.setHeader("Access-Control-Max-Age", "3600");        httpServletResponse.setHeader("Access-Control-Expose-Headers", "usertoken");        httpServletResponse.setHeader("Access-Control-Request-Headers", "usertoken");        httpServletResponse.setHeader("Expires", "-1");        httpServletResponse.setHeader("Cache-Control", "no-cache");        httpServletResponse.setHeader("pragma", "no-cache");        ServletRequest requestWrapper = null;        if (request instanceof HttpServletRequest) {            requestWrapper = new RequestWrapper((HttpServletRequest) request);        }        if (null == requestWrapper) {            chain.doFilter(request, response);        } else {            chain.doFilter(requestWrapper, response);        }    }    @Override    public void destroy() {    }}

一个CORS实现跨域的过滤器

package com.grain.filter;import java.io.IOException;import javax.servlet.Filter;import javax.servlet.FilterChain;import javax.servlet.FilterConfig;import javax.servlet.ServletException;import javax.servlet.ServletRequest;import javax.servlet.ServletResponse;import javax.servlet.http.HttpServletRequest;import javax.servlet.http.HttpServletResponse;public class CORSFilter implements Filter { @Override public void init(FilterConfig arg0) throws ServletException {  // TODO Auto-generated method stub   } @Override public void destroy() {  // TODO Auto-generated method stub   } @Override public void doFilter(ServletRequest req, ServletResponse res, FilterChain filterChain)   throws IOException, ServletException {  HttpServletRequest request = (HttpServletRequest) req;        HttpServletResponse response = (HttpServletResponse) res;  response.addHeader("Access-Control-Allow-Origin", "*");        response.addHeader("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE");        response.addHeader("Access-Control-Allow-Headers", "Content-Type");        response.addHeader("Access-Control-Max-Age", "1800");//30 min        filterChain.doFilter(request, response);  }}

web.xml配置

<filter>   <filter-name>CORSFilter</filter-name>   <filter-class>com.grain.filter.CORSFilter</filter-class>  </filter>  <filter-mapping>    <filter-name>CORSFilter</filter-name>   <url-pattern>/*</url-pattern>  </filter-mapping>

以上为个人经验，希望能给大家一个参考，也希望大家多多支持。

这种精神使人能在旅行中和大自然更加接近，