ContiNew/continew-admin
1
1
Fork 0
mirror of https://github.com/continew-org/continew-admin.git synced 2025-11-04 10:57:10 +08:00
Code Issues Packages Projects Releases Wiki Activity

优化：优化跨域配置，可支持配置允许跨域的具体域名或 *

Browse Source
This commit is contained in:
Charles7c
2023-03-23 19:54:15 +08:00
parent 30ba5bb5f4
commit 8591a24730
3 changed files with 14 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
continew-admin-common/src/main/java/top/charles7c/cnadmin/common/config/WebMvcConfiguration.java
View File

@@ -36,6 +36,7 @@ import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
import top.charles7c.cnadmin.common.config.properties.CorsProperties;
import top.charles7c.cnadmin.common.config.properties.LocalStorageProperties;
import top.charles7c.cnadmin.common.constant.StringConsts;
/**
* Web MVC 配置
@@ -75,13 +76,17 @@ public class WebMvcConfiguration implements WebMvcConfigurer {
@Bean
public CorsFilter corsFilter() {
CorsConfiguration config = new CorsConfiguration();
// 配置为 true 后则必须配置允许跨域的域名，且不允许配置为 *
config.setAllowCredentials(true);
// 设置跨域允许时间
config.setMaxAge(1800L);
// 配置允许跨域的域名
corsProperties.getAllowedOrigins().forEach(config::addAllowedOrigin);
if (corsProperties.getAllowedOrigins().contains(StringConsts.ASTERISK)) {
config.addAllowedOriginPattern(StringConsts.ASTERISK);
} else {
// 配置为 true 后则必须配置允许跨域的域名，且不允许配置为 *
config.setAllowCredentials(true);
corsProperties.getAllowedOrigins().forEach(config::addAllowedOrigin);
}
// 配置允许跨域的请求方式
corsProperties.getAllowedMethods().forEach(config::addAllowedMethod);
// 配置允许跨域的请求头

5
continew-admin-common/src/main/java/top/charles7c/cnadmin/common/constant/StringConsts.java
View File

@@ -40,6 +40,11 @@ public class StringConsts implements StrPool {
*/
public static final String SEMICOLON = ";";
/**
* 星号
*/
public static final String ASTERISK = "*";
/**
* 中文逗号
*/