Jersey API中的多部分/表单数据出现CORS错误

时间:2018-02-24 00:16:26

标签: java rest jersey cors multipartform-data

我正在尝试上传一个excel文件,但是在Jersey API中出现了CORS错误。我正在使用带有multipart / form-data标头的angular 4调用API,并为每个传入的JAVA Rest API请求添加了一个过滤器。找到下面的代码并帮助我:

Angular API CALLING:

export class DboperationService {
private headers1 = new Headers({'Content-Type' : 'multipart/form-data'});
sendFile(fileObj: File){
    return this._http.post(this.baseURL+'/submitexcel', fileObj,{headers : this.headers1}).map(res => res.json().data).subscribe();
  }
}

REST API:

  @POST
           @Path("/submitexcel")
            @Consumes(MediaType.MULTIPART_FORM_DATA)
            public Response uploadFile(

                    @FormDataParam("file") InputStream uploadedInputStream,
                    @FormDataParam("file") FormDataContentDisposition fileDetail) {
                // check if all form parameters are provided
               System.out.println("CAssked");
                if (uploadedInputStream == null || fileDetail == null)
                    return Response.status(400).entity("Invalid form data").build();
                // create our destination folder, if it not exists
                try {
                    createFolderIfNotExists(UPLOAD_FOLDER);
                } catch (SecurityException se) {
                    System.out.println("Can not create destination folder on server");
                    return Response.status(500)
                            .entity("Can not create destination folder on server")
                            .header("Access-Control-Allow-Origin", "*")
                            .build();
                }
                String uploadedFileLocation = UPLOAD_FOLDER + fileDetail.getFileName();
                /*try {
                    //saveToFile(uploadedInputStream, uploadedFileLocation);
                } catch (IOException e) {
                    return Response.status(500).entity("Can not save file").build();
                }*/
                System.out.println("File saved to:"+uploadedFileLocation);
                return Response.status(200)
                        .entity("File saved to " + uploadedFileLocation)
                        .header("Access-Control-Allow-Origin", "*")
                        .build();
}

跨源过滤器:

package com.newgen.aproj2;


import com.sun.jersey.spi.container.ContainerRequest;
import com.sun.jersey.spi.container.ContainerResponse;
import com.sun.jersey.spi.container.ContainerResponseFilter;

public class CrossOrigin implements ContainerResponseFilter {

     @Override
        public ContainerResponse filter(ContainerRequest creq, ContainerResponse cresp) {

            cresp.getHttpHeaders().putSingle("Access-Control-Allow-Origin", "*");
            cresp.getHttpHeaders().putSingle("Access-Control-Allow-Credentials", "true");
            cresp.getHttpHeaders().putSingle("Access-Control-Allow-Methods", "GET, POST, DELETE, PUT, OPTIONS, HEAD");
            cresp.getHttpHeaders().putSingle("Access-Control-Allow-Headers", "Content-Type, Accept, X-Requested-With");

            return cresp;
        }
}

响应标题:

Response Header in Browser

1 个答案:

答案 0 :(得分:0)

我的项目中有相同的内容,我们使用以下标题

"Access-Control-Allow-Origin" : "*"
"Access-Control-Allow-Headers" : "Origin, X-Requested-With, Content-Type, Accept"

也许您只是错过Origin

中的Access-Control-Allow-Headers一个