Question

我正在使用SpringMVC。我想用Web服务调用XML文件以便稍后解析。问题是我无法访问XML文件，我收到此错误：否＆＃39;访问控制允许来源＆＃39;标头出现在请求的资源上。我尝试过以下解决方案：

我创建了一个新类，目的是添加Access-Control-Allow-Origin＆＃39;请求的ressource上的标题。这是类

package com.mycompany.myapp;

import java.io.IOException;
import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletOutputStream;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

public class JsonpFilter implements Filter {

private String functionName;

@Override
public void destroy() {

}

@Override
public void doFilter(ServletRequest request, ServletResponse servletResponse,
                     FilterChain chain) throws IOException, ServletException {

    if (!(request instanceof HttpServletRequest)) {
        throw new ServletException("This filter can "
                                   + " only process HttpServletRequest requests");
    }

    HttpServletRequest httpRequest = (HttpServletRequest) request;
    HttpServletResponse response = (HttpServletResponse) servletResponse;

    if (isJSONPRequest(httpRequest)) {
        ServletOutputStream out = response.getOutputStream();

        out.println(getCallbackMethod(httpRequest) + "(");
        chain.doFilter(request, response);
        out.println(");");

        response.setContentType("text/javascript");
    } else {
        response.addHeader("Access-Control-Allow-Origin", "*");
        chain.doFilter(request, response);
    }

}

@Override
public void init(FilterConfig filterConfig) throws ServletException {
    this.functionName = filterConfig.getInitParameter("encoding");
    if(this.functionName == null || this.functionName.length() <= 0) {
        this.functionName = "callback";
    }
}

private String getCallbackMethod(HttpServletRequest httpRequest) {
    return httpRequest.getParameter(this.functionName);
}

private boolean isJSONPRequest(HttpServletRequest httpRequest) {
    String callbackMethod = getCallbackMethod(httpRequest);
    return (callbackMethod != null && callbackMethod.length() > 0);
}

}

然后我在web.xml文件中添加这两行：

    <display-name>DataServices</display-name>

   <filter>
    <filter-name>JSONPRequestFilter</filter-name>
    <filter-class> com.mycompany.myapp.JsonpFilter</filter-class>
    <init-param>
        <param-name>functionName</param-name>
        <param-value>callback</param-value>
    </init-param>
</filter>

<filter-mapping>
    <filter-name>JSONPRequestFilter</filter-name>
    <url-pattern>/*</url-pattern>
</filter-mapping>

我没有任何恭维问题，但在执行时我在控制台中仍然遇到相同的错误。所以，“访问控制 - 允许 - 来源”＃39;标题没有被考虑在内。请，如果您能找到我的计划有什么问题，或建议我另一个解决方案，我会很感激

Answer 1

为此，请实现此界面

org.springframework.web.servlet.HandlerInterceptor

这是一个例子

@Component
public class CORSInterceptor implements HandlerInterceptor{
   private static final Log LOG = LogFactory.getLog(CORSInterceptor.class);

   @Override
   public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {

       LOG.trace("sending headers");
       response.setHeader("Access-Control-Allow-Origin", "*");
       response.setHeader("Access-Control-Allow-Methods", "POST, GET, PUT, DELETE");
       response.setHeader("Access-Control-Max-Age", "3600");
       response.setHeader("Access-Control-Allow-Headers", "x-requested-with");

       return true;
   }

   @Override
   public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, ModelAndView modelAndView)
        throws Exception {

   }

   @Override
   public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex)
        throws Exception {
        LOG.trace("afterCompletion is called");
   }

}

然后将此行添加到您的应用程序上下文

<mvc:interceptors>
    <bean class="com.elm.mb.rest.interceptors.CORSInterceptor" />
</mvc:interceptors>

请求的资源上不存在“Access-Control-Allow-Origin”标头。

1 个答案: