SpringBoot不啓用@CroOrigin。 Angular2 +的WebPack客戶

Question

我創建使用Sppring啓動一個REST上傳服務：

@CrossOrigin 
@RestController 
@RequestMapping("/upload") 
public class FileUploadHandler { 

    @PostMapping("/doUpload") 
    public String handleFileUpload(@RequestParam("file") MultipartFile file, RedirectAttributes redirectAttributes) { 

     if (!file.isEmpty()) { 
      try { 
       byte[] bytes = file.getBytes(); 
       BufferedOutputStream stream = new BufferedOutputStream(
         new FileOutputStream(new File(file.getName() + "-uploaded"))); 
       stream.write(bytes); 
       stream.close(); 
       return "You successfully uploaded " + file.getName() + " into " + file.getName() + "-uploaded !"; 
      } catch (Exception e) { 
       return "You failed to upload " + file.getName() + " => " + e.getMessage(); 
      } 
     } else { 

      redirectAttributes.addFlashAttribute("message", 
        "You successfully uploaded " + file.getOriginalFilename() + "!"); 

      return "Some error... "; 
     } 
    } 

} 

我使用的是Angular2 +的WebPack客戶端使用該服務。問題是，當我嘗試訪問服務時，我收到了一個CROS塊。

XMLHttpRequest cannot load http://localhost:8080/kti-cms-spring/upload/doUpload. Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://ac1068:8080' is therefore not allowed access. 

我使用glassfish4作爲應用程序服務器。

我的配置：

@Configuration 
@ComponentScan("de.awinta.kti.cms") 
public class MainConfig { 

    @Bean 
    public FilterRegistrationBean corsFilter() { 

     UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource(); 
     CorsConfiguration config = new CorsConfiguration(); 
     config.setAllowCredentials(true); 
     // likely you should limit this to specific origins 
     config.addAllowedOrigin("*"); 
     config.addAllowedHeader("*"); 
     config.addAllowedMethod("*"); 
     config.setAllowCredentials(Boolean.TRUE); 
     source.registerCorsConfiguration("/**", config); 
     FilterRegistrationBean bean = new FilterRegistrationBean(new CorsFilter(source)); 
     bean.setOrder(0); 
     return bean; 

    } 
} 

應用程序入口點

@SpringBootApplication 
public class KtiCmsApplication extends SpringBootServletInitializer { 

    public static void main(String[] args) { 
    SpringApplication.run(KtiCmsApplication.class, args); 
    } 

    @Override 
    protected SpringApplicationBuilder configure(SpringApplicationBuilder application) { 
     return application.sources(applicationClass); 
    } 

    private static Class<KtiCmsApplication> applicationClass = KtiCmsApplication.class; 
} 

我的想法如何得到這個工作，並想嘗試老式JAX-RS服務曝光。也許這裏有人有一個關於如何讓這個春天工作的想法。

Answer 1

我在代碼中看不到特定錯誤，但以下代碼片段可幫助您運行CORS。這就是我如何在Ember.js作爲Frontend的spring引導項目中設置cors。

嘗試將配置類CorsConfig添加到您的項目有CorsFilter豆：

package your.app.config; 

import org.springframework.context.annotation.Bean; 
import org.springframework.context.annotation.Configuration; 
import org.springframework.core.Ordered; 
import org.springframework.core.annotation.Order; 
import org.springframework.web.cors.CorsConfiguration; 
import org.springframework.web.cors.UrlBasedCorsConfigurationSource; 
import org.springframework.web.filter.CorsFilter; 

@Configuration 
public class CorsConfig { 

public CorsConfig() { 
} 

@Bean 
public CorsFilter corsFilter() { 

    UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource(); 
    CorsConfiguration config = new CorsConfiguration(); 
    config.setAllowCredentials(true); 
    // likely you should limit this to specific origins 
    config.addAllowedOrigin("*"); 
    config.addAllowedHeader("*"); 
    config.addAllowedMethod("OPTIONS"); 
    config.addAllowedMethod("HEAD"); 
    config.addAllowedMethod("GET"); 
    config.addAllowedMethod("PUT"); 
    config.addAllowedMethod("POST"); 
    config.addAllowedMethod("DELETE"); 
    config.addAllowedMethod("PATCH"); 
    config.setAllowCredentials(Boolean.TRUE); 
    source.registerCorsConfiguration("/**", config); 
    return new CorsFilter(source); 
} 
} 

添加@CrossOrigin到您的控制器（您已經有）

這些doc和SO問題，幫我弄這種運行：

• cors support in spring framework
• spring data rest and cors