has been blocked by CORS policy: Request header field authorization is not allowed by Access-Control

时间 2019-12-09

标签 blocked cors policy request header field authorization allowed access control 繁體版

原文原文链接

http://www.javashuo.com/article/p-xcprhdot-gt.htmlhtml

// TODO 支持跨域访问
        response.setHeader("Access-Control-Allow-Origin", "*");
        response.setHeader("Access-Control-Allow-Credentials", "true");
        response.setHeader("Access-Control-Allow-Methods", "*");
        response.setHeader("Access-Control-Allow-Headers", "Content-Type,Access-Token");
        response.setHeader("Access-Control-Expose-Headers", "*");

        if (request.getMethod().equals("OPTIONS")) {
            HttpUtil.setResponse(response, HttpStatus.OK.value(), null);
            return;
        }