Back-end solution [cross-domain problem]

insert image description here

Add the following code under the WebSecurity class

@Bean
    public CorsFilter corsFilter() {
    
    
        UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
        CorsConfiguration config = jHipsterProperties.getCors();
        config.setAllowCredentials(true);
        // 设置访问源地址
        config.addAllowedOriginPattern("*");
        // 设置访问源请求头
        config.addAllowedHeader("*");
        config.addExposedHeader("Authorization,Link,X-Total-Count,Location,Content-Disposition");
        // 设置访问源请求方法
        config.addAllowedMethod("*");
        source.registerCorsConfiguration("/**", config);
        return new CorsFilter(source);
    }

Add in SecurityConfiguration

	@Override
    public void configure(HttpSecurity http) throws Exception {
    
    
 		http
            .csrf()
            .disable()
            .addFilterBefore(corsFilter, UsernamePasswordAuthenticationFilter.class)
    }
            

Guess you like

Origin blog.csdn.net/qq_45486709/article/details/123976691