支持CORS跨域请求

RuoYi

2020-07-22 70afd727b1c28e93e9d1442cae9ba93ed0efeac9

支持CORS跨域请求

 src/main/java/com/ruoyi/framework/config/ResourcesConfig.java

@@ -1,7 +1,11 @@
package com.ruoyi.framework.config;



import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.context.annotation.Bean;

import org.springframework.context.annotation.Configuration;

import org.springframework.web.cors.CorsConfiguration;

import org.springframework.web.cors.UrlBasedCorsConfigurationSource;

import org.springframework.web.filter.CorsFilter;

import org.springframework.web.servlet.config.annotation.InterceptorRegistry;

import org.springframework.web.servlet.config.annotation.ResourceHandlerRegistry;

import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;

@@ -38,4 +42,24 @@
    {

        registry.addInterceptor(repeatSubmitInterceptor).addPathPatterns("/**");

    }

}


    /**

     * 跨域配置

     */

    @Bean

    public CorsFilter corsFilter()

    {

        UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();

        CorsConfiguration config = new CorsConfiguration();

        config.setAllowCredentials(true);

        // 设置访问源地址

        config.addAllowedOrigin("*");

        // 设置访问源请求头

        config.addAllowedHeader("*");

        // 设置访问源请求方法

        config.addAllowedMethod("*");

        // 对接口配置跨域设置

        source.registerCorsConfiguration("/**", config);

        return new CorsFilter(source);

    }

}


 src/main/java/com/ruoyi/framework/config/SecurityConfig.java

@@ -12,6 +12,8 @@
import org.springframework.security.core.userdetails.UserDetailsService;

import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;

import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;

import org.springframework.security.web.authentication.logout.LogoutFilter;

import org.springframework.web.filter.CorsFilter;

import com.ruoyi.framework.security.filter.JwtAuthenticationTokenFilter;

import com.ruoyi.framework.security.handle.AuthenticationEntryPointImpl;

import com.ruoyi.framework.security.handle.LogoutSuccessHandlerImpl;

@@ -47,6 +49,12 @@
     */

    @Autowired

    private JwtAuthenticationTokenFilter authenticationTokenFilter;

    
    /**

     * 跨域过滤器

     */

    @Autowired

    private CorsFilter corsFilter;

    

    /**

     * 解决 无法直接注入 AuthenticationManager

@@ -112,9 +120,11 @@
        httpSecurity.logout().logoutUrl("/logout").logoutSuccessHandler(logoutSuccessHandler);

        // 添加JWT filter

        httpSecurity.addFilterBefore(authenticationTokenFilter, UsernamePasswordAuthenticationFilter.class);

        // 添加CORS filter

        httpSecurity.addFilterBefore(corsFilter, JwtAuthenticationTokenFilter.class);

        httpSecurity.addFilterBefore(corsFilter, LogoutFilter.class);

    }



    
    /**

     * 强散列哈希加密实现

     */


 src/main/java/com/ruoyi/project/tool/gen/controller/GenController.java

@@ -178,6 +178,8 @@
    private void genCode(HttpServletResponse response, byte[] data) throws IOException

    {

        response.reset();

        response.addHeader("Access-Control-Allow-Origin", "*");

        response.addHeader("Access-Control-Expose-Headers", "Content-Disposition");

        response.setHeader("Content-Disposition", "attachment; filename=\"ruoyi.zip\"");

        response.addHeader("Content-Length", "" + data.length);

        response.setContentType("application/octet-stream; charset=UTF-8");