跨域

ch-admin-api/src/main/java/com/wwdz/ch/admin/config/ShiroConfig.java

@@ -60,6 +60,7 @@ public class ShiroConfig {
 		shiroFilterFactoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap);
 		Map<String, Filter> filters = shiroFilterFactoryBean.getFilters();
 		filters.put("authc", new ShiroCorsFilter());
+		shiroFilterFactoryBean.setFilters(filters);
 		return shiroFilterFactoryBean;
 	}
 

ch-admin-api/src/main/java/com/wwdz/ch/admin/config/ShiroCorsFilter.java

@@ -26,7 +26,7 @@ public class ShiroCorsFilter extends BasicHttpAuthenticationFilter {
      * 为response设置header，实现跨域
      */
     private void setHeader(HttpServletRequest request, HttpServletResponse response) {
-        response.setHeader("Access-Control-Allow-Origin", "*");
+        response.setHeader("Access-Control-Allow-Origin",  request.getHeader("Origin"));
         response.setHeader("Access-Control-Allow-Credentials", "true");
         response.setHeader("Access-Control-Allow-Methods", "POST,PUT,GET,OPTIONS,DELETE");
         response.setHeader("Access-Control-Max-Age", "3600");

ch-core/src/main/java/com/wwdz/ch/core/config/CorsFilterConfig.java

@@ -45,7 +45,7 @@ public class CorsFilterConfig implements Filter {
         HttpServletResponse resp = (HttpServletResponse)servletResponse;
         HttpServletRequest request = (HttpServletRequest) servletRequest;
         //放行所有,类似*,这里*无效
-        resp.setHeader("Access-Control-Allow-Origin", "*");
+        resp.setHeader("Access-Control-Allow-Origin", request.getHeader("Origin"));
         resp.setHeader("Access-Control-Allow-Credentials", "true");
         //允许请求方式
         resp.setHeader("Access-Control-Allow-Methods", "POST,PUT, GET, OPTIONS, DELETE");