Springsecurity separates front-end and back-end to solve cross-domain problems

1. Front-end project sends js

let param = new URLSearchParams();
param.append("username",this.username);
param.append("password",this.password)
axios({
    
    
    url:'http://localhost:8080/login',
    method:'POST',
    data:param

}).then(res => {
    
    
    console.log(res.data);
    if(res.data.code == 200){
    
    
        window.location.href="index.html"
    }

})

2. Add the CorsConfig class to the backend project to inherit WebMvcConfigurer

@Configuration
public class CorsConfig implements WebMvcConfigurer {
    
    
    @Override
    public void addCorsMappings(CorsRegistry registry) {
    
    
        // 设置允许跨域的路径
        registry.addMapping("/**")
                // 设置允许跨域请求的域名
                .allowedOriginPatterns("*")
                // 是否允许cookie
                .allowCredentials(false)
                // 设置允许的请求方式
                .allowedMethods("GET", "POST", "DELETE", "PUT")
                // 设置允许的header属性
                .allowedHeaders("*")
                // 跨域允许时间
                .maxAge(3600);
    }

}

Add http.cors();

  @Override
  protected void configure(HttpSecurity http) throws Exception {
    
    
        http.cors(); // 允许跨站访问

Guess you like

Origin blog.csdn.net/lanlan112233/article/details/130132219