SpringBoot+Spring Security无法实现跨域解决办法

矫情吗；* 2022-05-23 00:40 205阅读 0赞

未使用Security时跨域:

import org.slf4j.Logger;
    import org.slf4j.LoggerFactory;
    import org.springframework.beans.factory.annotation.Value;
    import org.springframework.boot.autoconfigure.AutoConfigureBefore;
    import org.springframework.context.annotation.Configuration;
    import org.springframework.format.FormatterRegistry;
    import org.springframework.web.servlet.config.annotation.*;
    
    @Configuration
    @AutoConfigureBefore(SecurityConfig.class)
    public class MyMvcConfigurer implements WebMvcConfigurer {
        public void addCorsMappings(CorsRegistry registry){
            LOGGER.info("跨域已设置");
            registry.addMapping("/**")
                    .allowedOrigins("*")
                    .allowedMethods("*")
                    .allowedHeaders("*")
                    .allowCredentials(true)
                    .maxAge(3600);
        }
    }

整合Security时发现只用上述方法前后端分离时仍存在跨域问题，解决方法如下：

@Configuration
    @AutoConfigureBefore(Swagger2Configuration.class)
    @EnableWebSecurity
    @EnableGlobalMethodSecurity(prePostEnabled = true)
    @Order(-1)
    public class SecurityConfig extends WebSecurityConfigurerAdapter {
    
    
    
        
    
        @Override
        protected void configure(HttpSecurity http) throws Exception {
            http.formLogin()
                    .loginProcessingUrl("/user/login")
                    .loginPage("/singIn.html")
                    .successHandler(moyuAuthenticationSuccessHandler)
                    .failureHandler(moyuAuthenticationFailureHandler)
                    .and()
                    .apply(moyuSocialSecurityConfig)
                    .and()
                    .rememberMe()
                    .tokenRepository(persistentTokenRepository())
                    .tokenValiditySeconds(3600*24*7)
                    .userDetailsService(userDetailsService)
                    .and()
                    .authorizeRequests()
                    .antMatchers("/user/login","/login","/singIn.html","**","/**").permitAll()
                    .anyRequest()
                    .authenticated()
                    .and()
                    .cors()
                    .and()
                    .csrf().disable();
    
    
    
        }
    }

重点加入代码：

.and()
       .cors()//新加入
       .and()
       .csrf().disable();