cxf支持cors跨域

我不是女神ヾ 2022-06-09 08:41 263阅读 0赞

**摘要：**前台直接ajax请求后台webService服务，可能涉及跨域，是否同源，可以参考[http://www.ruanyifeng.com/blog/2016/04/same-origin-policy.html][http_www.ruanyifeng.com_blog_2016_04_same-origin-policy.html]  
环境：spring+cxf  
顺便把搭建cxf rest服务的一些代码配置也贴出来了

一.所需jar

<dependency>
                <groupId>org.apache.cxf</groupId>
                <artifactId>cxf-rt-frontend-jaxrs</artifactId>
                <version>3.1.7</version>
                <scope>provided</scope>
            </dependency>
    
            <dependency>
                <groupId>org.apache.cxf</groupId>
                <artifactId>cxf-rt-transports-http-jetty</artifactId>
                <version>3.1.7</version>
                <scope>provided</scope>
            </dependency>
    
            <dependency>
                <groupId>org.apache.cxf</groupId>
                <artifactId>cxf-rt-rs-extension-providers</artifactId>
                <version>3.1.7</version>
                <scope>provided</scope>
            </dependency>
    
        
        <dependency>
                <groupId>org.apache.cxf</groupId>
                <artifactId>cxf-rt-rs-security-cors</artifactId>
                <version>3.1.7</version>
            </dependency>

接口代码

@Produces({MediaType.APPLICATION_JSON + ";charset=UTF-8"})
    @Path("/")
    public interface OssTokenService { 
    
        /** * <p>APP请求临时oss秘钥</p> * @return 返回临时访问oss的秘钥信息 */
        @GET
        @CrossOriginResourceSharing(
                allowAllOrigins = true,
                allowOrigins = { "*" },
                allowCredentials = true
        )
        @Path("/token")
        public String getToken();
    
    }

上面的@CrossOriginResourceSharing cxf支持cors跨域的注解\{  
allowAllOrigins : true 为真，资源将被返回  
allowCredentials : true 为真，资源将被返回  
allowOrigins : 允许的访问资源  
\}  
注意的是，这里只是对这个接口里的这一个方法生效，放接口类上是对所有方法生效

spring.xml配置代码

<?xml version="1.0" encoding="UTF-8"?>
    <beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:context="http://www.springframework.org/schema/context" xmlns:aop="http://www.springframework.org/schema/aop" xmlns:osgi="http://www.springframework.org/schema/osgi" xmlns:osgix="http://www.springframework.org/schema/osgi-compendium" xmlns:cxf="http://cxf.apache.org/core" xmlns:jaxrs="http://cxf.apache.org/jaxrs" xmlns:util="http://www.springframework.org/schema/util" xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context.xsd http://www.springframework.org/schema/util http://www.springframework.org/schema/util/spring-util.xsd http://cxf.apache.org/jaxrs http://cxf.apache.org/schemas/jaxrs.xsd http://cxf.apache.org/core http://cxf.apache.org/schemas/core.xsd http://www.springframework.org/schema/osgi http://www.springframework.org/schema/osgi/spring-osgi.xsd http://www.springframework.org/schema/osgi-compendium http://www.springframework.org/schema/osgi-compendium/spring-osgi-compendium.xsd ">
    
        <context:annotation-config />
        <context:component-scan base-package="com.yf.af.oss"/>
    
        <bean id="ossTokenService" class="com.yf.af.oss.service.impl.OssTokenServiceImpl" lazy-init="true" scope="singleton">
        </bean>
    
        
    
        <cxf:bus id="yfafOssBus">
            <cxf:properties>
                <entry key="skip.default.json.provider.registration" value="true"/>
                <entry key="org.apache.cxf.jaxrs.bus.providers" value-ref="busProviders"/>
            </cxf:properties>
            <cxf:features>
                <cxf:logging/>
            </cxf:features>
        </cxf:bus>
        <util:list id="busProviders">
            <ref bean="jsonProvider"/>
        </util:list>
    
        <bean id="jsonProvider" class="com.fasterxml.jackson.jaxrs.json.JacksonJsonProvider" />
    
        <jaxrs:server address="/oss">
            <jaxrs:serviceBeans>
                <list>
                    <ref bean="ossTokenService"/>
                </list>
            </jaxrs:serviceBeans>
    
    
            <jaxrs:providers>
                <bean class="org.apache.cxf.rs.security.cors.CrossOriginResourceSharingFilter" >
                    <property name="allowOrigins" value="*">
                    </property>
                </bean>
                
            </jaxrs:providers>
    
        </jaxrs:server>
    </beans>

测试：HTML页面ajax请求

<!DOCTYPE HTML>
    <html>
    <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
    <title>test HTML</title>
    <script type="text/javascript" src="jquery-1.8.3.js"></script>
    
    <script> $(document).ready(function(){ /*$.getJSON("url", { 参数：'值' }, function(json) { alert("1111"); });*/ $("p").click(function(){ var requestURL ="http://localhost:8181/cxf/oss/token; $.ajax({ type: "GET", url: requestURL, data: null, async: false, dataType: 'json', success: function(data) { alert(data); } }); }); }); </script>
    </head>
    <body>
    <p>click</p>
    </body>
    </body>
    </html>

[http_www.ruanyifeng.com_blog_2016_04_same-origin-policy.html]: http://www.ruanyifeng.com/blog/2016/04/same-origin-policy.html