import lombok.extern.slf4j.Slf4j;

import org.springframework.context.ApplicationContext;

import java.io.IOException;

import javax.servlet.Filter;

import javax.servlet.FilterChain;

import javax.servlet.FilterConfig;

import javax.servlet.ServletException;

import javax.servlet.ServletRequest;

import javax.servlet.ServletResponse;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;

/**

 * 功能描述 cors过滤类

 *

 * @author duke

 * @since 2020-11-19

 */

@Slf4j

public class CorsFilter implements Filter {

    private static final String DEFAULT_ALLOW_HEADERS =

        "Origin,x-cbg-victoria-rolename,X-Requested-With,Content-Type,Accept,client_id,appid,uuid,Authorization,TraceID"

            + ",haehead,traceid,x-app-id,x-service-type,x-cbg-language,x-sub-app-id,x-multi-consumer-appid,x-group"

            + ",trackid,Pragma,Cache-Control,x-honor-victoria-rolename,x-pix-app-type,x-pix-app-url,x-pix-csrf-token"

            + ",x-pix-main-role-code,x-pix-page-url,x-csrf-token";

    private ApplicationContext context;

    /**

     * init

     *

     * @param filterConfig param

     * @throws ServletException ex

     */

    @Override

    public void init(FilterConfig filterConfig) throws ServletException {

    }

    /**

     * doFilter

     *

     * @param servletRequest param

     * @param servletResponse param

     * @param filterChain param

     * @throws IOException ex

     * @throws ServletException ex

     */

    @Override

    public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain)

        throws IOException, ServletException {

        HttpServletRequest request = (HttpServletRequest) servletRequest;

        HttpServletResponse response = (HttpServletResponse) servletResponse;

        log.info("request method:{},url:{},servletPath:{}", request.getMethod(), request.getRequestURL(),

            request.getServletPath());

        response.setCharacterEncoding("UTF-8");

        // 配置来源 '*'

        String originHeader = StringVerifyUtil.dealSpecialChar(request.getHeader("Origin"));

        log.info("Duke current request origin= {} ", originHeader);

        response.setHeader("Access-Control-Allow-Origin", originHeader);

        // 允许获取证书

        response.setHeader("Access-Control-Allow-Credentials", "true");

        // 配置请求方法

        response.setHeader("Access-Control-Allow-Methods", "POST,GET,OPTIONS,DELETE,PUT");

        // 配置请求头，如果有自定义的请求头，必须配置

        response.setHeader("Access-Control-Allow-Headers", DEFAULT_ALLOW_HEADERS);

        response.setHeader("Content-Type", "application/json;charset=UTF-8");

        response.setHeader("Cache-Control", "no-cache, no-store, must-revalidate"); // 支持HTTP 1.1.

        response.setHeader("Pragma", "no-cache"); // 支持HTTP 1.0. response.setHeader("Expires", "0");

        response.setHeader("Access-Control-Max-Age", "3600"); // 设置过期时间

        if ("OPTIONS".equals(request.getMethod())) {

            log.info("OPTIONS request, let it response OK to browser.");

            response.setStatus(HttpServletResponse.SC_OK);

        } else {

            filterChain.doFilter(servletRequest, servletResponse);

        }

        log.info("CorsFilter end------------------------------------------------------ ");

    }

    /**

     * destroy

     */

    @Override

    public void destroy() {

    }

    /**

     * setContext

     *

     * @param context param

     */

    public void setContext(ApplicationContext context) {

        this.context = context;

    }

}

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.boot.web.servlet.FilterRegistrationBean;

import org.springframework.context.ApplicationContext;

import org.springframework.context.annotation.Bean;

import org.springframework.context.annotation.Configuration;

/**

 * 功能描述

 *

 * @author duke

 * @since 2020-11-19

 */

@Configuration

public class FilterRegistry {

    @Autowired

    ApplicationContext context;

    /**

     * corsFilterRegistrationBean

     *

     * @return FilterRegistrationBean

     */

    @Bean

    public FilterRegistrationBean corsFilterRegistrationBean() {

        FilterRegistrationBean registrationBean = new FilterRegistrationBean();

        CorsFilter corsFilter = new CorsFilter();

        corsFilter.setContext(context);

        registrationBean.setFilter(corsFilter);

        registrationBean.addUrlPatterns("/*"); // 所有路径请求

        registrationBean.setName("CorsFilter");

        registrationBean.setOrder(1);

        return registrationBean;

    }

}