记录一下Springboot过滤器和跨域配置

最新推荐文章于 2025-02-15 02:55:46 发布

原创最新推荐文章于 2025-02-15 02:55:46 发布 · 369 阅读

1 ·

CC 4.0 BY-SA版权

文章标签：

#过滤器

后台专栏收录该内容

9 篇文章

订阅专栏

本文揭示了在SpringBoot项目中，简单CORS过滤器与跨域配置的冲突，并提供了两种过滤器实现方式和相应的配置建议，以确保正确处理跨域请求。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

注意！！springboot过滤器和跨域配置不能同时配置，两者选其一

springboot过滤器1

package com.wust.demo.config;

import javax.servlet.*;
import javax.servlet.annotation.WebFilter;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;

/**
 * 解决跨域设置
 * （可把此设置放在 nginx 中，但只能设置一处）
 */

@WebFilter(filterName = "simpleCORSFilter", urlPatterns = {"/*"})
public class SimpleCORSFilter implements Filter {

    @Override
    public void init(FilterConfig filterConfig) throws ServletException {
    }

    @Override
    public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {

        HttpServletResponse response = (HttpServletResponse) servletResponse;
        HttpServletRequest request = (HttpServletRequest) servletRequest;

        // 此处 setHeader、addHeader 方法都可用。但 addHeader时写多个会报错：“...,but only one is allowed”
        // response.setHeader("Access-Control-Allow-Origin", "*");
        response.addHeader("Access-Control-Allow-Origin", request.getHeader("origin"));
        // 解决预请求（发送2次请求），此问题也可在 nginx 中作相似设置解决。
        response.setHeader("Access-Control-Allow-Headers", "x-requested-with,Cache-Control,Pragma,Content-Type,Token, token,Content-Type");
        response.setHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS, DELETE,PATCH,PUT");
        response.setHeader("Access-Control-Max-Age", "3600");
        response.setHeader("Access-Control-Allow-Credentials", "true");
        String method = request.getMethod();
        if (method.equalsIgnoreCase("OPTIONS")) {
            servletResponse.getOutputStream().write("Success".getBytes("utf-8"));
        } else {
            filterChain.doFilter(servletRequest, servletResponse);
        }
    }

    @Override
    public void destroy() {

    }

}

springboot过滤器2


package com.wust.demo.config;
import org.springframework.stereotype.Component;
import javax.servlet.*;
import javax.servlet.annotation.WebFilter;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
import lombok.extern.slf4j.Slf4j;


@Component
@Slf4j
@WebFilter(urlPatterns = { "/**" }, filterName = "SimpleCORSFilter")
public class SimpleCORSFilter implements Filter {
    @Override
    public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain) throws IOException, ServletException, ServletException {
        HttpServletResponse response = (HttpServletResponse) res;
        HttpServletRequest request=(HttpServletRequest)req;
        String originHeader=request.getHeader("Origin");

        response.setHeader("Access-Control-Allow-Origin", originHeader);
       response.setHeader("Cache-Control", "no-cache");
        response.setHeader("Access-Control-Allow-Methods", "POST,GET,PUT,OPTIONS,DELETE");
        response.setHeader("Access-Control-Max-Age", "3600");
        response.setHeader("Access-Control-Allow-Headers", "Origin,X-Requested-With,Content-Type,Accept,Authorization,token");
        response.setHeader("Access-Control-Allow-Credentials", "true");
//        String Authorization=request.getHeader("Authorization");
        chain.doFilter(req,res);
    }

}

springboot跨域配置1

package com.wust.demo.config;

import lombok.extern.slf4j.Slf4j;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.bind.annotation.CrossOrigin;
import org.springframework.web.servlet.config.annotation.CorsRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;

@Configuration
public class CorsConfig implements WebMvcConfigurer {

    @Override
    public void addCorsMappings(CorsRegistry registry) {

        //本应用的所有方法都会去处理跨域请求
        registry.addMapping("/*")
                //允许远端访问的域名
                .allowedOrigins("*")
                //允许跨域请求的方法
                .allowedMethods("GET","POST","DELETE","PUT","OPTIONS")
                //是否允许Cookie
                .allowCredentials(true)
                .allowedHeaders("Authorization","token","Origin", "X-Requested-With", "Content-Type", "Accept", "timestamp")

                //设置在跨域请求
                .maxAge(3600);
    }

}

springboot跨域配置2

    @Override
    public void addCorsMappings(CorsRegistry registry) {
        registry.addMapping("/**")
                //设置允许跨域请求的域名
                //当**Credentials为true时，**Origin不能为星号，需为具体的ip地址【如果接口不带cookie,ip无需设成具体ip】
                .allowedOrigins("http://localhost:8089", "http://127.0.0.1:8089","http://127.0.0.1:8080","http://localhost:8080")
                //是否允许证书 不再默认开启
                .allowCredentials(false)
                //设置允许的方法
                .allowedMethods("*")
                .allowedHeaders("Authorization","token","Origin", "X-Requested-With", "Content-Type", "Accept", "timestamp")
                //跨域允许时间
                .maxAge(3600);
    }