在 Rest Controller 中删除方法 Cors 问题

Posted 2023-03-04

【中文标题】在 Rest Controller 中删除方法 Cors 问题

【英文标题】：Delete Method Cors issue in Rest Controller

【发布时间】：2017-08-27 06:40:26

【问题描述】：

我的项目中有一些 Rest 端点，我从另一台服务器中的客户端应用程序调用这些端点。我已经使用@CrossOrigin 注释成功禁用了 Cors，所有方法都可以正常工作，除了在 Chrome 上引发以下错误的 Delete 方法：

XMLHttpRequest cannot load http://localhost:8856/robotpart/1291542214/compatibilities. Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://127.0.0.1:8888' is therefore not allowed access. The response had HTTP status code 403.

这是我的控制器：

@CrossOrigin(origins = "*")
@ExposesResourceFor(RobotPart.class)
public class RobotPartController 

      //All endpoints are working except the Delete Mapping

    @GetMapping("/robotpart")
    public ResponseEntity<List<RobotPartResource>> listAllParts() 
        //..
    

    @GetMapping("/robotpart/id")
    public ResponseEntity<RobotPartResource> getById(@PathVariable Integer id) 
        //..
    


    @GetMapping("/robotpart/id/compatibilities")
    public ResponseEntity<Collection<RobotPartResource>> getRobotCompatibilities(@PathVariable Integer id,
          //..
    


    @PostMapping("/robotpart")
    public ResponseEntity<RobotPartResource> getById(@RequestBody @Valid RobotPart newRobot) 
        //..

    @PutMapping("/robotpart/id")
    public ResponseEntity<RobotPartResource> modify(@PathVariable Integer id, @Valid @RequestBody RobotPart newRobot) 

         //...
    

    @DeleteMapping("/robotpart/id")
    public ResponseEntity<RobotPart> deleteById(@PathVariable Integer id) 

        //...
    

    

有什么办法吗？

【参考方案1】：

我找到了一个解决方案，在分析http请求后，我注意到Access-Control-Allow-Methods头缺少DELETE方法，所以我通过删除@CrossOrigin注释来添加它，并将这个bean添加到配置中：

        @Bean
        public WebMvcConfigurer corsConfigurer() 
            return new WebMvcConfigurerAdapter() 
                @Override
                public void addCorsMappings(CorsRegistry registry) 
                    registry.addMapping("/robotpart/**").allowedOrigins("*").allowedMethods("GET", "POST","PUT", "DELETE");


                
            ;