java - 存在“Access-Control-Allow-Origin” header

Question

我有一个带有功能的简单 Controller 。

@RestController
@CrossOrigin(origins = "http://localhost:4200", allowedHeaders = "*")
@RequestMapping("/api")
public class DockerController {

  @Autowired
private DockerService dockerService;

  @PostMapping("/docker/container/{containerName}/pause")
public boolean pauseContainer(@PathVariable String containerName) {
    dockerService.pauseContainer(containerName);
    return true;
}

}

但是当我尝试从角度应用程序运行它时，我得到了

zone.js:2969 POST http://localhost:8080/api/docker/container/Env666/pause 403 () http://localhost:8080/api/docker/container/Env666/pause: No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://localhost:4200' is therefore not allowed access. The response had HTTP status code 403.

这种情况在我使用服务功能后开始发生。

Answer 1

我成功重现了 CORS 错误，与Spring CrossOrigin Javadoc相反告诉你:

By default the supported methods are the same as the ones to which a controller method is mapped.

我必须在 CrossOrigin 注释中手动指定方法:

@CrossOrigin(origins="http://localhost:4200", allowedHeaders="*", methods={RequestMethod.POST})