Spring云网关上的CORS配置出错

Question

请帮忙。我正在使用Spring Cloud Gateway，我不断收到以下Cors错误：

CORS策略阻止从源http://localhost:4200在http://localhost:8084/users/files处访问XMLHttpRequest：对预飞行请求的响应无法通过权限改造检查：请求的资源上不存在“访问控制-允许-源”标头。

这是我的application.yml档案

  cloud:
    gateway:
      globalcors:
        cors-configurations:
          '[/**]':
            allowedOrigins: "*"
            allowedMethods: "*"```

Here is my Route Config:
```@Bean
    public RouteLocator myRoutes(RouteLocatorBuilder builder) {
        
        return builder.routes()
                .route(r -> r.path("/users/**")
                        .filters(f -> f.filter(authFilter))
                        .uri("http://localhost:8080/"))
 
                .build();
    }```

Here is my CorsConfiguration File.

```@Configuration
public class CorsConfiguration {

  private static final String ALLOWED_HEADERS = "x-requested-with, authorization, Content-Type, Content-Length, Authorization, credential, X-XSRF-TOKEN";
  private static final String ALLOWED_METHODS = "GET, PUT, POST, DELETE, OPTIONS, PATCH";
  private static final String ALLOWED_ORIGIN = "*";
  private static final String MAX_AGE = "7200"; //2 hours (2 * 60 * 60) 

  @Bean
  public WebFilter corsFilter() {
    return (ServerWebExchange ctx, WebFilterChain chain) -> {
      ServerHttpRequest request = ctx.getRequest();
      if (CorsUtils.isCorsRequest(request)) {
        ServerHttpResponse response = ctx.getResponse();
        HttpHeaders headers = response.getHeaders();
        headers.add("Access-Control-Allow-Origin", ALLOWED_ORIGIN);
        headers.add("Access-Control-Allow-Methods", ALLOWED_METHODS);
        headers.add("Access-Control-Max-Age", MAX_AGE); //OPTION how long the results of a preflight request (that is the information contained in the Access-Control-Allow-Methods and Access-Control-Allow-Headers headers) can be cached. 
        headers.add("Access-Control-Allow-Headers",ALLOWED_HEADERS);
        if (request.getMethod() == HttpMethod.OPTIONS) {
          response.setStatusCode(HttpStatus.OK);
          return Mono.empty();
        }
      }
      return chain.filter(ctx);
    };
  }

}```

Please help... What am I doing wrong ? Or missing ? Thanks

Answer 1

对于maven用户，请尝试添加以下依赖项：

<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-tomcat</artifactId>
</dependency>

为我修理

Answer 2

在您的CORS配置中，您仅在CORS请求时设置CORS标头，而在飞行前请求时不设置CORS标头。飞行前请求失败。因此，您需要删除if（CorsUtils.isCorsRequest（request））条件。

Answer 3

你可以添加add-to-Simple-url-handler映射属性到你的application.yml像下面这样，然后再试一次

cloud:
gateway:
  globalcors:
    cors-configurations:
      '[/**]':
        allowedOrigins: "*"
        allowedMethods: "*"
    add-to-simple-url-handler-mapping: true