Browse Source

fix: 跨域配置不生效

dev
wangqing 4 years ago
parent
commit
92ac89f536
  1. 21
      tduck-api/src/main/java/com/tduck/cloud/api/config/FilterConfig.java
  2. 8
      tduck-api/src/main/java/com/tduck/cloud/api/config/WebMvcConfig.java

21
tduck-api/src/main/java/com/tduck/cloud/api/config/FilterConfig.java

@ -27,6 +27,27 @@ public class FilterConfig {
private final PlatformSignProperties platformSignProperties; private final PlatformSignProperties platformSignProperties;
/**
* 跨域过滤器
*
* @return
*/
@Bean
public FilterRegistrationBean corsFilterRegistration() {
FilterRegistrationBean registration = new FilterRegistrationBean();
registration.setDispatcherTypes(DispatcherType.REQUEST);
CorsConfiguration config = new CorsConfiguration();
config.addAllowedOrigin("*");
config.addAllowedMethod("*");
config.addAllowedHeader("*");
UrlBasedCorsConfigurationSource corsConfigurationSource = new UrlBasedCorsConfigurationSource();
corsConfigurationSource.registerCorsConfiguration("/**", config);
CorsFilter corsFilter = new CorsFilter(corsConfigurationSource);
registration.setOrder(Integer.MAX_VALUE - 4);
registration.setFilter(corsFilter);
return registration;
}
/** /**
* xss 过滤器 优先级最高 * xss 过滤器 优先级最高
* 包装 XssHttpServletRequestWrapper 解决request只能使用一次 * 包装 XssHttpServletRequestWrapper 解决request只能使用一次

8
tduck-api/src/main/java/com/tduck/cloud/api/config/WebMvcConfig.java

@ -36,14 +36,6 @@ public class WebMvcConfig implements WebMvcConfigurer {
"/**/*.woff", "/**/*.woff",
"/**/*.ttf"); "/**/*.ttf");
@Override
public void addCorsMappings(CorsRegistry registry) {
registry.addMapping("/**")
.allowedOrigins("*")
.allowCredentials(true)
.allowedMethods("GET", "POST", "PUT", "DELETE", "OPTIONS")
.maxAge(36000);
}
@Override @Override
public void addInterceptors(InterceptorRegistry registry) { public void addInterceptors(InterceptorRegistry registry) {

Loading…
Cancel
Save