跨域

ch-admin-api/src/main/java/com/wwdz/ch/admin/config/ShiroCorsFilter.java

@@ -26,11 +26,11 @@ public class ShiroCorsFilter extends BasicHttpAuthenticationFilter {
      * 为response设置header，实现跨域
      */
     private void setHeader(HttpServletRequest request, HttpServletResponse response) {
-        response.setHeader("Access-Control-Allow-Origin", request.getHeader("Origin"));
+        response.setHeader("Access-Control-Allow-Origin", "*");
         response.setHeader("Access-Control-Allow-Credentials", "true");
         response.setHeader("Access-Control-Allow-Methods", "POST,PUT,GET,OPTIONS,DELETE");
         response.setHeader("Access-Control-Max-Age", "3600");
-        response.setHeader("Access-Control-Allow-Headers", "content-type,x-requested-with,token,Authorization,authorization");
+        response.setHeader("Access-Control-Allow-Headers", "*");
         response.setHeader("Content-Type", "application/json;charset=UTF-8");
     }
 }

ch-core/src/main/java/com/wwdz/ch/core/config/CorsFilterConfig.java

@@ -45,13 +45,13 @@ public class CorsFilterConfig implements Filter {
         HttpServletResponse resp = (HttpServletResponse)servletResponse;
         HttpServletRequest request = (HttpServletRequest) servletRequest;
         //放行所有,类似*,这里*无效
-        resp.setHeader("Access-Control-Allow-Origin", request.getHeader("Origin"));
+        resp.setHeader("Access-Control-Allow-Origin", "*");
         resp.setHeader("Access-Control-Allow-Credentials", "true");
         //允许请求方式
         resp.setHeader("Access-Control-Allow-Methods", "POST,PUT, GET, OPTIONS, DELETE");
         resp.setHeader("Access-Control-Max-Age", "3600");
         //需要放行header头部字段 如需鉴权字段，自行添加，如Authorization
-        resp.setHeader("Access-Control-Allow-Headers", "content-type,x-requested-with,token,Authorization,authorization");
+        resp.setHeader("Access-Control-Allow-Headers", "*");
         filterChain.doFilter(servletRequest,servletResponse);
     }