Request header field Access-Control-Allow-Origin is not allowed by Access-Control-Allow-Headers

时间 2019-11-29

标签 request header field access control allow origin allowed headers 繁體版

原文原文链接

Failed to load resource: Request header field Access-Control-Allow-Origin is not allowed by Access-Control-Allow-Headers.
XMLHttpRequest cannot load http://130.51.23.12:8180/cas/remoteLogin. 
Request header field Access-Control-Allow-Origin is not allowed by Access-Control-Allow-Headers.

解决：去掉axios里，服务端cas没有allow的两个header， // 'Access-Control-Allow-Origin':'*', // 'Access-Control-Allow-Methods':'GET, POST, OPTIONS', 或者，服务端增长allow：ios

httpServletResponse.setHeader("Access-Control-Allow-Headers",
	"Content-Type, Access-Control-Allow-Headers, Authorization, X-Requested-With, Access-Control-Allow-Methods, Access-Control-Allow-Origin");