spring cloud gateway跨域全局CORS配置方式

import org.springframework.http.HttpHeaders;

import org.springframework.http.HttpStatus;

import org.springframework.http.server.reactive.ServerHttpRequest;

import org.springframework.http.server.reactive.ServerHttpResponse;

import org.springframework.web.cors.reactive.CorsUtils;

import org.springframework.web.server.ServerWebExchange;

import org.springframework.web.server.WebFilter;

import org.springframework.web.server.WebFilterChain;

import org.springframework.http.HttpMethod;

import reactor.core.publisher.Mono;

import static org.springframework.web.cors.CorsConfiguration.ALL;

public class XXXApplication{

public static void main(String[] args) {

     SpringApplication.run(XXXApplication. class , args);

}

private static final String MAX_AGE = "18000L" ;

@Bean

public WebFilter corsFilter() {

     return (ServerWebExchange ctx, WebFilterChain chain) -> {

         ServerHttpRequest request = ctx.getRequest();

         if (!CorsUtils.isCorsRequest(request)) {

             return chain.filter(ctx);

         }

         HttpHeaders requestHeaders = request.getHeaders();

         ServerHttpResponse response = ctx.getResponse();

         HttpMethod requestMethod = requestHeaders.getAccessControlRequestMethod();

         HttpHeaders headers = response.getHeaders();

         headers.add(HttpHeaders.ACCESS_CONTROL_ALLOW_ORIGIN, requestHeaders.getOrigin());

         headers.addAll(HttpHeaders.ACCESS_CONTROL_ALLOW_HEADERS, requestHeaders.getAccessControlRequestHeaders());

         if (requestMethod != null ) {

             headers.add(HttpHeaders.ACCESS_CONTROL_ALLOW_METHODS, requestMethod.name());

         }

         headers.add(HttpHeaders.ACCESS_CONTROL_ALLOW_CREDENTIALS, "true" );

         headers.add(HttpHeaders.ACCESS_CONTROL_EXPOSE_HEADERS, ALL);

         headers.add(HttpHeaders.ACCESS_CONTROL_MAX_AGE, MAX_AGE);

         if (request.getMethod() == HttpMethod.OPTIONS) {

             response.setStatusCode(HttpStatus.OK);

             return Mono.empty();

         }

         return chain.filter(ctx);

     };

}

}

spring:

   cloud:

     gateway:

       globalcors:

         corsConfigurations:

           '[/**]' :

             allowedOrigins: "*"

             allowedMethods: "*"

             allowedHeaders: "*"

spring:

   cloud:

     gateway:

       globalcors:

         cors-configurations:

           '[/**]' :

             # 允许携带认证信息

             # 允许跨域的源(网站域名/ip)，设置*为全部

             # 允许跨域请求里的head字段，设置*为全部

             # 允许跨域的method， 默认为GET和OPTIONS，设置*为全部

             # 跨域允许的有效期

             allow-credentials: true

             allowed-origins: '*'

             allowed-headers: Content-Type,Content-Length, Authorization, Accept,X-Requested-With

             allowed-methods: '*'

             exposed-headers: Content-Type,Content-Length, Authorization, Accept,X-Requested-With

             max-age: 3600

import lombok.extern.slf4j.Slf4j;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.beans.factory.annotation.Qualifier;

import org.springframework.boot.autoconfigure.condition.ConditionalOnMissingBean;

import org.springframework.boot.autoconfigure.condition.ConditionalOnWebApplication;

import org.springframework.boot.web.servlet.FilterRegistrationBean;

import org.springframework.context.annotation.Bean;

import org.springframework.core.Ordered;

import org.springframework.web.cors.CorsConfiguration;

import org.springframework.web.cors.UrlBasedCorsConfigurationSource;

import org.springframework.web.filter.CorsFilter;

/**

  * @author ZhouChuGang

  * @version 1.0

  * @project langangkj-commonm

  * @date 2020/5/4 12:24

  * @Description 跨域过滤器配置

  */

@Slf4j

@configuration

@ConditionalOnMissingBean (CorsFilter. class )

@ConditionalOnWebApplication (type = ConditionalOnWebApplication.Type.SERVLET)

public class CorsFilterConfiguration {

     public CorsFilterConfiguration() {

         log.info( "==========注入跨域过滤器=============" );

     }

     @Bean ( "corsFilter" )

     public CorsFilter corsFilter() {

         UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();

         CorsConfiguration config = new CorsConfiguration();

         // #允许向该服务器提交请求的URI，*表示全部允许

         config.addAllowedOrigin(CorsConfiguration.ALL);

         // 允许cookies跨域

         config.setAllowCredentials( true );

         // #允许访问的头信息,*表示全部

         config.addAllowedHeader(CorsConfiguration.ALL);

         // 允许提交请求的方法，*表示全部允许

         config.addAllowedMethod(CorsConfiguration.ALL);

         source.registerCorsConfiguration( "/**" , config);

         return new CorsFilter(source);

     }

     @Autowired

     @Qualifier ( "corsFilter" )

     private CorsFilter corsFilter;

     /**

      * 配置跨域过滤器

      */

     @Bean

     public FilterRegistrationBean<CorsFilter> corsFilterRegistration() {

         FilterRegistrationBean<CorsFilter> registration = new FilterRegistrationBean<>();

         registration.setFilter(corsFilter);

         registration.addUrlPatterns( "/*" );

         registration.setName( "corsFilter" );

         registration.setOrder(Ordered.HIGHEST_PRECEDENCE);

         return registration;

     }

}

# 这个为请求头中的 origin

add_header 'Access-Control-Allow-Origin' '$http_origin' ;

add_header 'Access-Control-Allow-Credentials' 'true' ;

add_header 'Access-Control-Allow-Methods' 'PUT,POST,GET,DELETE,OPTIONS' ;

add_header 'Access-Control-Allow-Headers' 'Content-Type,Content-Length,Authorization,Accept,X-Requested-With' ;

add_header 'Access-Control-Allow-Origin' '$http_origin' ;

add_header 'Access-Control-Allow-Credentials' 'true' ;

add_header 'Access-Control-Allow-Methods' 'PUT,POST,GET,DELETE,OPTIONS' ;

add_header 'Access-Control-Allow-Headers' 'Content-Type,Content-Length,Authorization,Accept,X-Requested-With' ;