|
@@ -0,0 +1,40 @@
|
|
1
|
+package com.njyunzhi.invoice.config.cros;
|
|
2
|
+
|
|
3
|
+import org.springframework.beans.factory.annotation.Autowired;
|
|
4
|
+import org.springframework.stereotype.Component;
|
|
5
|
+import org.springframework.web.filter.OncePerRequestFilter;
|
|
6
|
+
|
|
7
|
+import javax.servlet.FilterChain;
|
|
8
|
+import javax.servlet.ServletException;
|
|
9
|
+import javax.servlet.http.HttpServletRequest;
|
|
10
|
+import javax.servlet.http.HttpServletResponse;
|
|
11
|
+import java.io.IOException;
|
|
12
|
+
|
|
13
|
+@Component
|
|
14
|
+public class CorsFilter extends OncePerRequestFilter {
|
|
15
|
+
|
|
16
|
+ @Autowired
|
|
17
|
+ CorsProperties crosProperties;
|
|
18
|
+
|
|
19
|
+ @Override
|
|
20
|
+ protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) throws ServletException, IOException {
|
|
21
|
+
|
|
22
|
+ if (null == crosProperties.getEnabled() || !crosProperties.getEnabled()) {
|
|
23
|
+ filterChain.doFilter(request, response);
|
|
24
|
+ return ;
|
|
25
|
+ };
|
|
26
|
+
|
|
27
|
+ String origin = request.getHeader("Origin");
|
|
28
|
+ response.setHeader("Access-Control-Allow-Origin", origin);
|
|
29
|
+ response.setHeader("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE, OPTIONS");
|
|
30
|
+ response.setHeader("Access-Control-Max-Age", "3600");
|
|
31
|
+ response.setHeader("Access-Control-Allow-Headers", "*");
|
|
32
|
+ response.addHeader("Access-Control-Expose-Headers", String.join(", ", crosProperties.getExposedHeaders()));
|
|
33
|
+
|
|
34
|
+ if ("OPTIONS".equals(request.getMethod())) {
|
|
35
|
+ response.setStatus(HttpServletResponse.SC_OK);
|
|
36
|
+ } else {
|
|
37
|
+ filterChain.doFilter(request, response);
|
|
38
|
+ }
|
|
39
|
+ }
|
|
40
|
+}
|