Question

我正在为我的网络应用程序使用NGINX和sparkjava。我确信我已正确启用所有CORS标头。不过，我正在＆＃34; XMLHttpRequest无法加载http://localhost:3003/platformAPI/login。无效的HTTP状态代码404＆＃34; error.Below分别提到了来自extjs和spark java的客户端和服务器方法。我已经检查了浏览器的网络选项卡以获取响应和请求标头。它们也在下面提到。我非常感谢任何帮助让我知道我的方法有什么问题：）

来自Nginx的客户端方法：

function(button, event, options){
           var form = Ext.getCmp("LoginformId").getForm();
             if (form.isValid()) {
                    var userJson = JSON.stringify(form.getFieldValues());
                    form.submit({
                        url: 'http://localhost:3003/platformAPI/login',
                        //headers : {'Content-Type':undefined,},
                        //dataType: 'jsonp',
                        success: function(form, action) {
                      // Ext.Msg.alert('Success', action.result.msg);
                       var sessionID=action.result.sessionID;
                       var clientName=action.result.clientName;
                       sessionStorage.setItem('sessionID',sessionID);
                       sessionStorage.setItem('clientName',clientName);                                             
                       window.location="http://localhost:3000/";
                        },
                        failure: function(form, action) {
                            Ext.Msg.alert('Failed', action.result.msg);
                        }
                    });

            }
        }

服务器方法：

过滤以启用CORS标头（主要调用此主题）

private static void enableCORS(final String origin, final String methods, final String headers) {
        before(new Filter() {
            @Override
            public void handle(Request request, Response response) {                
                response.header("Access-Control-Allow-Origin",request.headers("origin"));
                response.header("Access-Control-Allow-Headers", "Origin, x-requested-with, content-type, Accept");
                response.header("Access-Control-Request-Method", "GET,PUT,POST,DELETE,OPTIONS");
               );
            }
        });

    }

登录方式：

post("platformAPI/login", "undefined",
                (request, response) -> {
                    System.out.print("inside login");
                    JSONObject object1 = new JSONObject();
                    response.body(object1.put("success", true).toString());
                    return response;
                });

请求和回复标题：

Remote Address:127.0.0.1:3003
Request URL:http://localhost:3003/platformAPI/login
Request Method:OPTIONS
Status Code:404 Not Found


Response Headers
view source
Access-Control-Allow-Headers:Origin, x-requested-with, content-type, Accept
Access-Control-Allow-Origin:http://localhost:3000
Access-Control-Request-Method:GET,PUT,POST,DELETE,OPTIONS
Cache-Control:must-revalidate,no-cache,no-store
Content-Length:295
Content-Type:text/html; charset=ISO-8859-1
Server:Jetty(9.0.2.v20130417)


Request Headers
view source
Accept:*/*
Accept-Encoding:gzip, deflate, sdch
Accept-Language:en-US,en;q=0.8
Access-Control-Request-Headers:x-requested-with, content-type
Access-Control-Request-Method:POST
Connection:keep-alive
Host:localhost:3003
Origin:http://localhost:3000
Referer:http://localhost:3000/
User-Agent:Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.89 Safari/537.36

Answer 1

尝试使用以下代码段在Spark-Java中启用CORS：

        options("/*",
            (request, response) -> {

                String accessControlRequestHeaders = request
                        .headers("Access-Control-Request-Headers");
                if (accessControlRequestHeaders != null) {
                    response.header("Access-Control-Allow-Headers",
                            accessControlRequestHeaders);
                }

                String accessControlRequestMethod = request
                        .headers("Access-Control-Request-Method");
                if (accessControlRequestMethod != null) {
                    response.header("Access-Control-Allow-Methods",
                            accessControlRequestMethod);
                }

                return "OK";
            });

    before((request, response) -> {
        response.header("Access-Control-Allow-Origin", "*");
    });

Answer 2

前提是您还必须考虑这一点。它将与Postman一起使用，因为您是直接调用服务器。这里没有CORS。但是，当您通过javascript或angular等操作时，CORS就会发挥作用。因此，所请求的网址不包含http方案。您需要将localhost：portNumber / login更改为http://localhost:portNumber/login

NGINX和spark Java之间的跨源通信

2 个答案: