使用SpringMVC解決Ajax跨域問題

 

 

 

 

 

package com.mengyao.system.filter;

import java.io.IOException;

import javax.servlet.FilterChain;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.stereotype.Component;
import org.springframework.web.filter.OncePerRequestFilter;

/**
 * CORSFilter 解決跨域問題
 * @author mengyao 
 *
 */
@Component
public class InitCORSFilter extends OncePerRequestFilter {

	private Logger logger = LoggerFactory.getLogger(InitCORSFilter.class);
	
	public InitCORSFilter() {
		logger.info("==== 初始化系統允許跨域請求 ====");
	}
	
	/**
	 * 解決跨域：Access-Control-Allow-Origin，值為*表示服務器端允許任意Domain訪問請求
	 */
	@Override
	protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain)
            throws ServletException, IOException {
        if (request.getHeader("Access-Control-Request-Method") != null && "OPTIONS".equals(request.getMethod())) {
            response.addHeader("Access-Control-Allow-Origin", "*");
            response.addHeader("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE, OPTIONS");
            response.addHeader("Access-Control-Allow-Headers", "origin, content-type, accept, x-requested-with, sid, mycustom, smuser");
            response.addHeader("Access-Control-Max-Age", "1800");//30 min
        }
        filterChain.doFilter(request, response);
    }
	
}