CORS起源Spring靴Jhipster-飞行前失败

Question

我使用的是JHIPSTERV2.27.2，我通过取消application.yml中的行注释来启用cors

jhipster:
async:
    corePoolSize: 2
    maxPoolSize: 50
    queueCapacity: 10000

cors: #By default CORS are not enabled. Uncomment to enable.
    allowed-origins: "*"
    allowed-methods: GET, PUT, POST, DELETE, OPTIONS
    allowed-headers: "*"
    exposed-headers:
    allow-credentials: true
    max-age: 1800

@Bean
    public CorsFilter corsFilter() {
        UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
        CorsConfiguration config = props.getCors();
        if (config.getAllowedOrigins() != null && !config.getAllowedOrigins().isEmpty()) {
            source.registerCorsConfiguration("/api/**", config);
            source.registerCorsConfiguration("/v2/api-docs", config);
            source.registerCorsConfiguration("/oauth/**", config);
        }
        return new CorsFilter(source);
    }

Answer 1

在默认的securityconfiguration中，它不会跳过选项的安全检查。

尝试将以下AntMatcher添加到SecurityConfiguration.java中的Protected void configure（HttpSecurity http)方法

.antMatchers(org.springframework.http.HttpMethod.OPTIONS, "/api/**").permitAll()