浏览代码

允许携带cookie

yq 4 年之前
父节点
当前提交
c1f7b083e4
共有 1 个文件被更改,包括 5 次插入1 次删除
  1. 5 1
      fiveep-service/src/main/java/com/bizmatics/service/config/SessionFilter.java

+ 5 - 1
fiveep-service/src/main/java/com/bizmatics/service/config/SessionFilter.java

@@ -35,7 +35,11 @@ public class SessionFilter implements Filter {
     public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain chain) throws IOException, ServletException {
     public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain chain) throws IOException, ServletException {
         HttpServletResponse  httpServletResponse = (HttpServletResponse)servletResponse;
         HttpServletResponse  httpServletResponse = (HttpServletResponse)servletResponse;
         HttpServletRequest request = (HttpServletRequest)servletRequest;
         HttpServletRequest request = (HttpServletRequest)servletRequest;
-        httpServletResponse.setHeader("Access-Control-Allow-Origin", "*");
+        String origin = request.getHeader("Origin");
+        if(origin == null) {
+            origin = request.getHeader("Referer");
+        }
+        httpServletResponse.setHeader("Access-Control-Allow-Origin", origin);
         httpServletResponse.setHeader("Access-Control-Allow-Methods",
         httpServletResponse.setHeader("Access-Control-Allow-Methods",
                 "POST, GET, OPTIONS, DELETE");
                 "POST, GET, OPTIONS, DELETE");
         httpServletResponse.setHeader("Access-Control-Max-Age", "3600");
         httpServletResponse.setHeader("Access-Control-Max-Age", "3600");