image.png

Spring Boot：

/**
 * @ClassName: CorsConfig
 * @Description: 解決前后端分離調(diào)用時跨域問題.注意安全風(fēng)險,更細(xì)粒度的控制,可在方法上 @CrossOrigin(origins = "url")
 * @author lengyu
 * @date 2017年7月22日 下午2:52:59
 * 
 */
@Configuration
public class CorsConfig {
    @Autowired
    private VhscProperties vhscProperties;

    @Bean
    public FilterRegistrationBean corsFilter() {
        UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
        CorsConfiguration config = new CorsConfiguration();
        config.setAllowCredentials(true);
        config.addAllowedOrigin(vhscProperties.getAllowedOrigins());
        config.addAllowedHeader("*");
        config.addAllowedMethod("*");
        source.registerCorsConfiguration("/**", config);
        FilterRegistrationBean bean = new FilterRegistrationBean(new CorsFilter(source));
        bean.setOrder(0);
        return bean;
    }

}

前端Ajax:

<script type="text/javascript">
    $(".btn").click(function() {
        $.ajax({
                url: 'http://www.b.com:8080/sys/config/list?limit=10&page=1&sidx=&order=asc',
                type: 'post',
                headers: {
                    "token": "63663b1edc9510c5cc2dcb364f6ce52b"
                },
                dataType: 'json'
            })
            .done(function(data) {
                console.log(data);
            })
    })
</script>