请求的资源上没有“Access-Control-Allow-Origin”标头，响应的HTTP状态代码为401

Question

我一直在实现Spring（4.3）Restful应用程序，它具有基于spring security和oauth（2）的配置。实现这些配置后，我通过邮递员测试了我的其余api调用，一切都很好，但我的客户端只是jquery或ajax。当我试图调用oauth令牌时，它会在请求的资源上显示“No'Access-Control-Allow-Origin”标头。因此不允许原点'http://localhost:8080'访问“错误，我已经配置了cors启用配置。但我不知道我错过了哪一部分，请帮助我。在google上提出这么多建议之后我还尝试了过滤器方法以及Spring安全配置方法。但仍然得到同样的错误。

我的服务器代码

@Configuration
public class WebConfig extends WebMvcConfigurerAdapter {

  @Override
  public void addCorsMappings(CorsRegistry registry) {
    registry.addMapping("/**")
            .allowedMethods("HEAD", "GET", "PUT", "POST", "DELETE", 
            "PATCH","OPTIONS"));
 }
}

=======================================

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {
@Override
@Order(Ordered.HIGHEST_PRECEDENCE)
protected void configure(HttpSecurity http) throws Exception {
    http.cors().and()
    .sessionManagement()
    .sessionCreationPolicy(SessionCreationPolicy.STATELESS).and()
    //.csrf().disable()
    .authorizeRequests()
            .antMatchers("/register").permitAll()
            .antMatchers("/contact").permitAll()
            .antMatchers("/signup").permitAll()
            .antMatchers("/oauth/**").permitAll()
            .antMatchers(HttpMethod.OPTIONS,"*").permitAll()
            .anyRequest().authenticated().and()

            .httpBasic();
    // .realmName("CRM_REALM");

}

============================================

@Bean
public CorsConfigurationSource corsConfigurationSource() {
    final CorsConfiguration configuration = new CorsConfiguration();
    configuration.setAllowedOrigins(Arrays.asList("*"));
    configuration.setAllowedMethods(Arrays.asList("HEAD",
            "GET", "POST", "PUT", "DELETE", "PATCH","OPTIONS")));
    // setAllowCredentials(true) is important, otherwise:
    // The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'.
    configuration.setAllowCredentials(true);
    // setAllowedHeaders is important! Without it, OPTIONS preflight request
    // will fail with 403 Invalid CORS request
    configuration.setAllowedHeaders(Arrays.asList("Authorization", "Cache-Control", "Content-Type"));
    final UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
    source.registerCorsConfiguration("/**", configuration);
    return source;
}

客户代码

 var settings = {
          "async": true,
          "crossDomain": true,
          "url": "http://10.10.1.13:8080/OauthCrud/oauth/token",
          "method": "POST",
          "headers": {
            "authorization": "Basic b2F1dGhDcnVkOm9hdXRoU3VwZXJTZWNyZXQ=",
            "content-type": "application/x-www-form-urlencoded",
            "cache-control": "no-cache",
            "postman-token": "22b603e4-bf59-b722-d758-f51a1fe1a1d4"
          },
          "data": {
            "username": "rama",
            "password": "rama",
            "grant_type": "password"
          }
        }

        $.ajax(settings).done(function (response) {
          console.log(response);
        });

错误：