如何連接 Angular 2 與 Spring 啟動應用程序？

Question

我使用 HttpModule 發送 post 請求以將登錄憑據發送到 Spring 框架應用程序，但該請求被 spring security.ZC31C335EF37283C451B18BA0DD317DEOptions 應用程序過濾掉，但未發送一些“post請求”請求。

下面的代碼有什么作用？

public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain) {
        HttpServletResponse response = (HttpServletResponse) res;
        HttpServletRequest request = (HttpServletRequest) req;

        response.setHeader("Access-Control-Allow-Origin", "http://localhost:4200");
        response.setHeader("Access-Control-Allow-Methods", "POST, PUT, GET, OPTIONS, DELETE");
        response.setHeader("Access-Control-Allow-Headers", "x-requested-with");
        response.setHeader("Access-Control-Max-Age", "3600");
        response.setHeader("Access-Control-Allow-Credentials", "true");

        if (!(request.getMethod().equalsIgnoreCase("OPTIONS"))) {
            try {
                chain.doFilter(req, res);
            } catch(Exception e) {
                e.printStackTrace();
            }
        } else {
            System.out.println("Pre-flight");
            response.setHeader("Access-Control-Allow-Methods", "POST,GET,DELETE");
            response.setHeader("Access-Control-Max-Age", "3600");
            response.setHeader("Access-Control-Allow-Headers", "authorization, content-type," +
                    "access-control-request-headers,access-control-request-method,accept,origin,authorization,x-requested-with");
            response.setStatus(HttpServletResponse.SC_OK);
        }

    }

Answer 1

您的 CORS 配置僅允許來自

 response.setHeader("Access-Control-Allow-Origin", "http://localhost:4200");

確保您的 Angular 客戶端正在該特定主機和端口上運行。

瀏覽器最初發出 HTTP OPTIONS（CORS 飛行前）請求以驗證客戶端主機/端口是否與服務器響應中的匹配（即您設置的 Access-Control-Allow-Origin 響應 header 的值）