跨源请求被阻止，angularjs对jersey api的rest调用

Question

我完全被难住了。我对AngularJS非常陌生，我正试图对我的泽西服务器api进行rest调用，但我运气不好。它使用curl或高级Rest客户端（Chrome浏览器加载项）工作。然而，当我试图使用我的angularjs应用程序打我的Rest时，我重复了以下内容…

  $scope.login = function() {

This lets me connect to my server on a different domain
  $http.defaults.headers.common['Authorization'] = 'Basic ' + Base64.encode('username' + ':' + 'password');

  $http({method: 'GET', url: 'http://localhost:8080/JerseyDemos/rest/employees'}).
  success(function(data) {
    console.log(data)
  }).

这是我的CORS过滤器...

import java.io.IOException;
import javax.ws.rs.container.ContainerRequestContext;
import javax.ws.rs.container.ContainerResponseContext;
import javax.ws.rs.container.ContainerResponseFilter;

public class CorsResponseFilter implements ContainerResponseFilter {

@Override
public void filter(ContainerRequestContext request,
                   ContainerResponseContext response) throws IOException {
    response.getHeaders().add("Access-Control-Allow-Origin", "*");
    response.getHeaders().add("Access-Control-Allow-Headers",
            "origin, content-type, accept, authorization");
    response.getHeaders().add("Access-Control-Allow-Credentials", "true");
    response.getHeaders().add("Access-Control-Allow-Methods",
            "GET, POST, PUT, DELETE, OPTIONS, HEAD");
}

}

注册我的CORS筛选器的应用程序类

import com.howtodoinjava.jersey.provider.CorsResponseFilter;
import org.glassfish.jersey.filter.LoggingFilter;
import org.glassfish.jersey.server.ResourceConfig;
import com.howtodoinjava.jersey.provider.AuthenticationFilter;
import com.howtodoinjava.jersey.provider.GsonMessageBodyHandler;
public class CustomApplication extends ResourceConfig  {
public CustomApplication() 
{
    packages("com.howtodoinjava.jersey");
    register(CorsResponseFilter.class);
    register(LoggingFilter.class);
    register(GsonMessageBodyHandler.class);
    register(AuthenticationFilter.class);
}

<display-name>Archetype Created Web Application</display-name>

<servlet>
    <servlet-name>jersey-serlvet</servlet-name>
    <servlet-class>org.glassfish.jersey.servlet.ServletContainer</servlet-class>
    <init-param>
        <param-name>javax.ws.rs.Application</param-name>
        <param-value>com.howtodoinjava.jersey.CustomApplication</param-value>
    </init-param>
    <load-on-startup>1</load-on-startup>
</servlet>

<servlet-mapping>
    <servlet-name>jersey-serlvet</servlet-name>
    <url-pattern>/rest/*</url-pattern>
</servlet-mapping>

@Provider
@Path("/employees")
public class JerseyService {
@Path("/all")
@RolesAllowed("ADMIN")
@GET
@Produces(MediaType.APPLICATION_JSON)
public Response getAllEmployees()
{
    Employees list = new Employees();
    list.setEmployeeList(new ArrayList<Employee>());

    list.getEmployeeList().add(new Employee(1, "Lokesh Gupta"));
    list.getEmployeeList().add(new Employee(2, "Alex Kolenchiskey"));
    list.getEmployeeList().add(new Employee(3, "David Kameron"));

    return Response.status(200).entity(list).header("Access-Control-Allow-Origin", "GET, POST, PUT, DELETE, OPTIONS, HEAD").build();
}

Answer 1

对于刚刚开始使用Web服务的人来说，这是一个非常常见的错误，解决起来非常简单，但有时开发人员会花几个小时来寻找解决方案。当您创建web服务并试图从不同的应用程序访问它时，它将无法工作，因为您没有启用跨源资源共享(CORS)，这意味着加载在一个域中的应用程序不能与来自不同域的资源交互。你所要做的就是启用CORS。

如何激活它将取决于您的场景，在本教程中，我将展示如何为运行在Glassfish上的Java EE应用程序启用CORS，我假设您有一个类似于此的EJB RESTful web服务，当其他应用程序试图使用它时，您会在firebug控制台上看到跨源请求阻塞错误，在这种情况下，您所要做的就是在应用程序中创建一个过滤器，只需在项目中创建一个类似于此的类：

import java.io.IOException;
import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletResponse;

public class CORSFilter implements Filter {

    @Override
    public void init(FilterConfig filterConfig) throws ServletException {
    }

    @Override
    public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, 
            FilterChain filterChain) throws IOException, ServletException {
        final HttpServletResponse response = (HttpServletResponse) servletResponse;
        response.setHeader("Access-Control-Allow-Origin", "*");
        response.setHeader("Access-Control-Allow-Credentials", "true");
        response.setHeader("Access-Control-Allow-Methods", "POST, GET, HEAD, OPTIONS");
        response.setHeader("Access-Control-Allow-Headers", "Origin, Accept, x-auth-token, "
                + "Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers");
        filterChain.doFilter(servletRequest, servletResponse);
    }

    @Override
    public void destroy() {

    }

}

现在，您必须在web.xml中注册过滤器，复制以下代码，并将“YourPackage”替换为实际的包名：

<filter>
    <filter-name>cors</filter-name>
    <filter-class>yourPackage.CORSFilter</filter-class>
</filter>
<filter-mapping>
    <filter-name>cors</filter-name>
    <url-pattern>/*</url-pattern>
</filter-mapping>

就是这样！现在您的应用程序将允许其资源与其他域共享。

其他跨源请求修复..