fix 78358 OPTIONS预检时的Access-Control-Allow-Methods能否去掉PUT DELETE请求

2023-11-09 16:05:44 +08:00
parent 6ede988d7b
commit 9aee2b0935
1 changed files with 1 additions and 1 deletions
@@ -81,7 +81,7 @@ public class JwtFilter extends BasicHttpAuthenticationFilter {
        HttpServletResponse httpServletResponse = (HttpServletResponse) response;
        if(allowOrigin){
            httpServletResponse.setHeader("Access-control-Allow-Origin", httpServletRequest.getHeader("Origin"));
-            httpServletResponse.setHeader("Access-Control-Allow-Methods", "GET,POST,OPTIONS,PUT,DELETE");
+            httpServletResponse.setHeader("Access-Control-Allow-Methods", "GET,POST");
            httpServletResponse.setHeader("Access-Control-Allow-Headers", httpServletRequest.getHeader("Access-Control-Request-Headers"));
            //update-begin-author:scott date:20200907 for:issues/I1TAAP 前后端分离，shiro过滤器配置引起的跨域问题
            // 是否允许发送Cookie，默认Cookie不包括在CORS请求之中。设为true时，表示服务器允许Cookie包含在请求中。