Use Sa-Token's global filter to solve cross-domain problems

SaTokenConfigure.javaJust set the response header in

/**
 * [Sa-Token 权限认证] 配置类 
 */
@Configuration
public class SaTokenConfigure {
    
    

	/**
     * 注册 [Sa-Token全局过滤器] 
     */
    @Bean
    public SaServletFilter getSaServletFilter() {
    
    
        return new SaServletFilter()
        		// 拦截与排除 path 
        		.addInclude("/**").addExclude("/favicon.ico")
        		
        		// 全局认证函数 
        		.setAuth(obj -> {
    
    
        			// ... 
        		})
        		
        		// 异常处理函数  
        		.setError(e -> {
    
    
        			return AjaxJson.getError(e.getMessage());
        		})
        		
        		// 前置函数:在每次认证函数之前执行
        		.setBeforeAuth(obj -> {
    
    
        			// ---------- 设置跨域响应头 ----------
        			SaHolder.getResponse()
        			// 允许指定域访问跨域资源
        			.setHeader("Access-Control-Allow-Origin", "*")
        			// 允许所有请求方式
        			.setHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS, DELETE")
        			// 有效时间
        			.setHeader("Access-Control-Max-Age", "3600")
        			// 允许的header参数
        			.setHeader("Access-Control-Allow-Headers", "*");
        			
        			// 如果是预检请求,则立即返回到前端 
        			SaRouter.match(SaHttpMethod.OPTIONS)
        				.free(r -> System.out.println("--------OPTIONS预检请求,不做处理"))
        				.back();
        		})
        		;
    }
    
}

The same is true for the WebFlux environment, just SaServletFilterreplace with SaReactorFilter, and the others remain unchanged

Guess you like

Origin blog.csdn.net/shengzhang_/article/details/119928794
Recommended