博客

springboot2 使用前后台分离，token放入header进行验证的配置

注意 registry.addInterceptor(new MyInterceptorConfig ()); 不能添加，否则header下token有时无法获取到

@Configuration
public class MyWebMvcConfigurer implements WebMvcConfigurer {
    @Override
    public void addCorsMappings(CorsRegistry registry) {
        //设置允许跨域的路径
        registry.addMapping("/**")
                //设置允许跨域请求的域名
                .allowedOrigins("*")
                .allowedHeaders("*")
//                .allowCredentials(true)//是否允许证书 不再默认开启
                //设置允许的方法
                .allowedMethods("GET", "POST", "PUT", "DELETE");
//                .maxAge(3600);//跨域允许时间
    }
  @Override
    public void addInterceptors(InterceptorRegistry registry) {
     //   registry.addInterceptor(new MyInterceptorConfig ()).addPathPatterns("/**");;
    }
}

以下验证token

@Configuration
public class MyInterceptorConfig implements HandlerInterceptor {
 public boolean preHandle(HttpServletRequest request, HttpServletResponse resp, Object handler) throws Exception {
         String token = request.getHeader("token");
...