SpringCloud微服务Zuul跨域问题

2019-01-23 07:40:45来源：博客园阅读 ()

目前项目结构是VUE做前端，后端采用微服务架构，在开发时前端需要跨域请求数据，通过ZuulFilter配置解决了简单跨域请求需要。但当需要在请求的header中增加token信息时，出现了请求失败的情况，浏览器和后台均出现OPTIONS类型请求相关提示。

Failed to load http://192.168.1.149:8000/server/addressbook/delete: Response to preflight request doesn't pass access control check: The 'Access-Control-Allow-Origin' header contains multiple values 'http://192.168.1.242:5500, http://192.168.1.242:5500', but only one is allowed. Origin 'http://192.168.1.242:5500' is therefore not allowed access.

这里其实已经很明确了，说头包含多个值，只允许一个然后我们看请求信息

为什么会这样呢？其实是我们在使用ZuulFilter的时候获取的 RequestContext 他给我们自带了 Access-Control-Allow-Origin，Access-Control-Allow-Credentials 这两个参数，所以我们在程序里面就不需要加了

import com.netflix.zuul.ZuulFilter;
import com.netflix.zuul.context.RequestContext;
import com.zuul.mgzuul.util.JwtHelperUtil;
import com.zuul.mgzuul.util.RedisUtil;
import lombok.extern.slf4j.Slf4j;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.cloud.netflix.zuul.filters.support.FilterConstants;
import org.springframework.stereotype.Component;
import javax.annotation.Resource;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

/**
 * @Author 唐银
 * @Description //TODO
 * @Date 2018-01-03 14:20
 * @ClassName MyFilter
 * @ClassNotes
 **/
@Slf4j
@Component
public class MyFilter extends ZuulFilter {

    @Resource
    private RedisUtil redisUtil;

    @Autowired
    private JwtHelperUtil jwtHelperUtil;

    @Override
    public String filterType() {
        /*
        pre：可以在请求被路由之前调用
        route：在路由请求时候被调用
        post：在route和error过滤器之后被调用
        error：处理请求时发生错误时被调用
        * */
        // 前置过滤器
        return FilterConstants.PRE_TYPE;

    }

    @Override
    public int filterOrder() {

        //// 优先级为0，数字越大，优先级越低
        return 0;
    }

    @Override
    public boolean shouldFilter() {
//        RequestContext ctx = RequestContext.getCurrentContext();
//        HttpServletRequest request = ctx.getRequest();
//        //过滤各种POST请求
//        if(request.getMethod().equals(RequestMethod.OPTIONS.name())){
//            return true;
//        }
        return true;

    }

    @Override
    public Object run() {

        System.out.println("*****************PostFilter run start*****************");
        RequestContext ctx = RequestContext.getCurrentContext();
        HttpServletResponse response = ctx.getResponse();
        HttpServletRequest request = ctx.getRequest();
        //response.setHeader("Access-Control-Allow-Origin",request.getHeader("Origin")); //这里注释掉
        //response.setHeader("Access-Control-Allow-Credentials","true"); //这里注释掉
        response.setHeader("Access-Control-Expose-Headers","X-forwared-port, X-forwarded-host,Origin, No-Cache, X-Requested-With, If-Modified-Since, Pragma, Last-Modified, Cache-Control, Expires, Content-Type, X-E4M-With,Authorization,Token,accessToken");
        response.setHeader("Vary","Origin,Access-Control-Request-Method,Access-Control-Request-Headers");
        String accessToken = request.getHeader("accessToken");
        //跨域请求放行
        if ("OPTIONS".equalsIgnoreCase(request.getMethod())) {
            ctx.setSendZuulResponse(true);
            ctx.setResponseStatusCode(200);
            System.out.println("*****************PostFilter run end*****************");
            return null;
        }

        String url = request.getRequestURI();
        if(url.indexOf("/login")!=-1){
            ctx.setSendZuulResponse(true);
            ctx.setResponseStatusCode(200);
            System.out.println("*****************PostFilter run end*****************");
            return null;
        }

        //验证token
        //String accessToken = request.getHeader("accessToken");
        /*String accessToken = request.getParameter("accessToken");
        if(StringUtils.isBlank(accessToken)){
            log.debug("accessToken 不存在！");
            ctx.setSendZuulResponse(false);
            ctx.setResponseStatusCode(401);// 返回错误码
            ctx.setResponseBody("{\"result\":\"token不存在\"}");// 返回错误内容
            ctx.set("isSuccess", false);
            return null;
        }
        Object token_ob = redisUtil.get(accessToken);
        if(token_ob == null){
            log.debug("accessToken 已经过期");
            ctx.setSendZuulResponse(false);
            ctx.setResponseStatusCode(401);// 返回错误码
            ctx.setResponseBody("{\"result\":\"token过期\"}");// 返回错误内容
            ctx.set("isSuccess", false);
            return null;
        }else {
            Claims claims = jwtHelperUtil.parseJWT(accessToken);
            if(claims == null){
                log.debug("accessToken 错误");
                ctx.setSendZuulResponse(false);
                ctx.setResponseStatusCode(401);// 返回错误码
                ctx.setResponseBody("{\"result\":\"token错误\"}");// 返回错误内容
                ctx.set("isSuccess", false);
                return null;
            }
        }
        //通过后更新登陆过期时间
        redisUtil.set(accessToken,accessToken, 259200);*/
        //允许继续路由
        ctx.setSendZuulResponse(true);
        ctx.setResponseStatusCode(200);
        System.out.println("*****************PostFilter run end*****************");
        return null;
    }
}