使用SpringCloudApiGateway之支持Cors跨域请求

import org.springframework.cloud.client.discovery.DiscoveryClient;

import org.springframework.cloud.gateway.discovery.DiscoveryClientRouteDefinitionLocator;

import org.springframework.cloud.gateway.route.RouteDefinitionLocator;

import org.springframework.context.annotation.Bean;

import org.springframework.context.annotation.Configuration;

import org.springframework.http.HttpHeaders;

import org.springframework.http.HttpMethod;

import org.springframework.http.HttpStatus;

import org.springframework.http.server.reactive.ServerHttpRequest;

import org.springframework.http.server.reactive.ServerHttpResponse;

import org.springframework.web.cors.reactive.CorsUtils;

import org.springframework.web.server.ServerWebExchange;

import org.springframework.web.server.WebFilter;

import org.springframework.web.server.WebFilterChain;

import reactor.core.publisher.Mono;

/**

  * SpringApiGateway Cors

  */

@Configuration

public class RouteConfiguration {

     //这里为支持的请求头，如果有自定义的header字段请自己添加（不知道为什么不能使用*）

     private static final String ALLOWED_HEADERS = "x-requested-with, authorization, Content-Type, Authorization, credential, X-XSRF-TOKEN,token,username,client" ;

     private static final String ALLOWED_METHODS = "*" ;

     private static final String ALLOWED_ORIGIN = "*" ;

     private static final String ALLOWED_Expose = "x-requested-with, authorization, Content-Type, Authorization, credential, X-XSRF-TOKEN,token,username,client" ;

     private static final String MAX_AGE = "18000L" ;

     @Bean

     public WebFilter corsFilter() {

         return (ServerWebExchange ctx, WebFilterChain chain) -> {

             ServerHttpRequest request = ctx.getRequest();

             if (CorsUtils.isCorsRequest(request)) {

                 ServerHttpResponse response = ctx.getResponse();

                 HttpHeaders headers = response.getHeaders();

                 headers.add( "Access-Control-Allow-Origin" , ALLOWED_ORIGIN);

                 headers.add( "Access-Control-Allow-Methods" , ALLOWED_METHODS);

                 headers.add( "Access-Control-Max-Age" , MAX_AGE);

                 headers.add( "Access-Control-Allow-Headers" , ALLOWED_HEADERS);

                 headers.add( "Access-Control-Expose-Headers" , ALLOWED_Expose);

                 headers.add( "Access-Control-Allow-Credentials" , "true" );

                 if (request.getMethod() == HttpMethod.OPTIONS) {

                     response.setStatusCode(HttpStatus.OK);

                     return Mono.empty();

                 }

             }

             return chain.filter(ctx);

         };

     }

     /**

     *

     *如果使用了注册中心（如：Eureka），进行控制则需要增加如下配置

     */

     @Bean

     public RouteDefinitionLocator discoveryClientRouteDefinitionLocator(DiscoveryClient discoveryClient) {

         return new DiscoveryClientRouteDefinitionLocator(discoveryClient);

     }

}

spring:

   cloud:

     gateway:

       globalcors:

         corsConfigurations:

           '[/**]' :

             allowedOrigins: "https://blog.csdn.net/moshowgame"

             allowedMethods:

             - GET

@RestController

//实现跨域注解

//origin="*"代表所有域名都可访问

//maxAge飞行前响应的缓存持续时间的最大年龄，简单来说就是Cookie的有效期 单位为秒若maxAge是负数,则代表为临时Cookie,不会被持久化,Cookie信息保存在浏览器内存中,浏览器关闭Cookie就消失

@CrossOrigin (origins = "*" ,maxAge = 3600 )

@RequestMapping ( "/album" )

public class AlbumController {}

spring:

   application:

     name: system-gateway

   cloud:

     gateway:

       globalcors:

         cors-configurations:

           '[/**]' : # 匹配所有请求

             allowedOrigins: "*" #跨域处理 允许所有的域

             allowedMethods: # 支持的方法

             - GET

             - POST

             - PUT

             - DELETE

default -filters:

       - AddResponseHeader=Access-Control-Allow-Credentials, true

       - AddResponseHeader=Access-Control-Allow-Headers,access-control-allow-origin

       - AddResponseHeader=Access-Control-Allow-Methods,GET

       - AddResponseHeader=Access-Control-Allow-Origin,*

       - AddResponseHeader=Access-Control-Allow-Age, 3600

location /example {

    if ($request_method = 'OPTIONS' ) {

        add_header Access-Control-Allow-Origin *;

        add_header Access-Control-Max-Age 1728000 ;

        add_header Access-Control-Allow-Methods GET,POST,OPTIONS;

        add_header Access-Control-Allow-Headers  'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range' ;

        add_header Content-Type ' ' text/plain; charset=utf- 8 ';

        add_header Content-Length 0 ;

        return 204 ;

     }

+   if ($http_origin ~* (https?: //(.+\.)?(example\测试数据$))) {

+     add_header  Access-Control-Allow-Origin $http_origin;

+     add_header  Access-Control-Allow-Credentials true ;

+     add_header  Access-Control-Allow-Methods GET,POST,OPTIONS;

+     add_header  Access-Control-Expose-Headers Content-Length,Content-Range;

+   }

     proxy_redirect off;

     proxy_set_header Host $host;

     proxy_set_header X-Real-IP $remote_addr;

     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

     proxy_pass http: //127.0.0.1:8080/;

    }