带cookie的跨域1

---

1、Access-Control-Allow-Origin:*解决不了带Cookie的跨域问题

    在响应头中设置此字段不能满足所有解决跨域问题的场景

    比如：带cookie的跨域请求

2、前端请求代码

index.html代码

    
                     //测试getCookie方法

                     it("测试getCookie方法", function(done) {

                            //服务器返回的结果

                            varresult;

                            $.ajax({

                                   type:"get",

                                   url:base +"/getCookie",

                                   xhrFields:{

                                       withCredentials:true

                                   },

                                   success:function(json){

                                          result= json;

                                   }

                            });

                            //由于是异步请求，需要使用setTimeout来校验

                            setTimeout(function(){

                                   expect(result).toEqual({

                                          "data": "getCookie"

                                   });

                                   //校验完成，通知jasmine框架

                                   done();

                            },100);

                     });

3、cookie后端服务代码

AjaxController.java代码

   @GetMapping("/getCookie")

   @ResponseBody

   public ResultBean getCookie(@CookieValue(value="cookie")String cookie){

       System.out.println("AjaxController.getCookie()");

       ResultBean resultBean = new ResultBean(cookie);

       return resultBean;

}

CrossFilter.java代码

  public void doFilter(ServletRequest servletRequest, ServletResponseservletResponse, FilterChain filterChain) throws IOException, ServletException{

       HttpServletResponse res = (HttpServletResponse) servletResponse;

       //带cookie请求，origin必须全匹配

       res.addHeader("Access-Control-Allow-Origin","http://localhost:8082");

//       res.addHeader("Access-Control-Allow-Methods","GET");

       // *号表示支持所有的域名（除了带cookie请求外）

//       res.addHeader("Access-Control-Allow-Origin","*");

       // *号表示支持所有的请求方法

       res.addHeader("Access-Control-Allow-Methods","*");

       res.addHeader("Access-Control-Allow-Headers","Content-Type");

       //设置OPTIONS预检命令缓存

       res.addHeader("Access-Control-Max-Age", "60000");

       //允许带cookie请求跨域

       res.addHeader("Access-Control-Allow-Credentials", "true");

       filterChain.doFilter(servletRequest, servletResponse);

}

4、验证跨域请求

Status：400表示请求参数有问题 在cookie信息里面添加字段“cookie” 回车：表示cookie字段设置成功 然后重新访问成功