“CORS标头'Access-Control-Allow-Origin'Missing'拒绝请求，即使origin是允许的

Question

@RestController
@CrossOrigin(origins = "http://localhost:4200")
public class Controller {

    @Autowired
    private ReqRepository reqRepository;

    @PostMapping("/reqs")
    public Req saveReq (@Valid @RequestBody Req req) {
        return reqRepository.save(req);
    }
}

@Repository
public interface ReqRepository extends JpaRepository<Req, Long> {
}

@Injectable()
export class ReqService {

  private httpOptions = {
    headers: new HttpHeaders({
      'Access-Control-Allow-Origin': '*',
      'Content-Type': 'application/json'
    })
};

  constructor(private http: HttpClient) {}

  sendReq(req: Req): Observable<Req> {
    return this.http.post<Req>('http://localhost:8080/reqs', req, this.httpOptions);
  }
}

我进一步测试了控制器，它适用于GET请求。我只是更改了方法，所以问题似乎出在POST请求上。下面用GET测试endpoint而不是POSTendpointist控制器

@RestController
@CrossOrigin(origins = "http://localhost:4200")
public class Controller {

    @Autowired
    private ReqRepository reqRepository;

    @GetMapping("/reqs")
    public Page<Req> testCall (Pageable pageable) {
        System.out.println("Geeting request");
        return reqRepository.findAll(pageable);
    }
}

Answer 1

很高兴你的要求现在起作用了。请注意'access-control-allog-origin':'*'是从服务器发送的标头。在这里，您试图将头从angular发送到服务器，但这将不起作用

另外，请更改@crossorigin(origins=“http://localhost:4200”）

到@crossorigin(origins=“http://localhost:4200”,methods=“get,POST,PUT,DELETE,origin”）查看它是否有效