学无先后,达者为师

网站首页 编程语言 正文

问题记录:HttpServletRequestWrapper导致跨域失败的问题

作者:何忆清风 更新时间: 2022-06-08 编程语言

记录一次自己搭建项目时,使用Filter实现统一响应体时遇到的跨域问题。
问题:定义了两个Filter过滤器,设置 corsFilter优先执行,ResponseFilter在执行后将返回体重新设置。导致跨域失败

@Configuration
public class ApplicationAutoConfig {


    @Bean
    public FilterRegistrationBean<CorsFilter> corsFilter() {
        //1. 添加 CORS配置信息
        CorsConfiguration config = new CorsConfiguration();
        //放行哪些原始域
        config.addAllowedOrigin("http://localhost:8080");
        //是否发送 Cookie
        config.setAllowCredentials(true);
        //放行哪些请求方式
        config.addAllowedMethod("*");
        //放行哪些原始请求头部信息
        config.addAllowedHeader("*");
        //暴露哪些头部信息
        config.addExposedHeader("*");
        //2. 添加映射路径
        UrlBasedCorsConfigurationSource corsConfigurationSource = new UrlBasedCorsConfigurationSource();
        corsConfigurationSource.registerCorsConfiguration("/**", config);
        //3. 返回新的CorsFilter
        FilterRegistrationBean<CorsFilter> bean = new FilterRegistrationBean(new CorsFilter(corsConfigurationSource));
        bean.setOrder(0);
        bean.addUrlPatterns("/*");
        return bean;
    }

    @Bean
    public FilterRegistrationBean<ResponseFilter> responseFilter() {
        FilterRegistrationBean<ResponseFilter> bean = new FilterRegistrationBean(new ResponseFilter());
        bean.setOrder(Integer.MAX_VALUE);
        return bean;
    }

}

由于在ReponseFilter中将request和reponse请求进行了封装,wrapResponse()方法中,将缓存中数据取出来后,会执行重置缓存区,原来调用的是 reset() 方法,reset方法会调用父类的reset方法去把reponse中的数据也清除掉包括设置的跨域头信息等,所以我们只需要清除掉缓存区中;将 reset()方法换成 resetBuffer() 即可

	@Override
	public void reset() {
		super.reset();
		this.content.reset();
	}
	//调用的super方法
	public void reset() {
        this.response.reset();
    }
public class ResponseFilter extends OncePerRequestFilter {

    //过滤掉swagger路径
    private static final Set<String> ALLOWED_PATH = Collections.unmodifiableSet(
            new HashSet<>(Arrays.asList(
                    "/swagger-ui.html",
                    "/v2/api-doc",
                    "/swagger-resources",
                    "/webjars")));

    @Override
    protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) throws IOException, ServletException {
        ContentCachingRequestWrapper requestWrapper = new ContentCachingRequestWrapper(request);
        ContentCachingResponseWrapper responseWrapper = new ContentCachingResponseWrapper(response);
        filterChain.doFilter(requestWrapper, responseWrapper);
        wrapResponse(responseWrapper);
        responseWrapper.copyBodyToResponse();
    }

    /**
     * 复写返回值信息
     *
     * @param response
     * @throws IOException
     */
    private void wrapResponse(ContentCachingResponseWrapper response) throws IOException {
        byte[] b = response.getContentAsByteArray();
        // 重置response中的body中的数据,不能使用reset()方法
        if (b.length > 0) {
            response.resetBuffer();
        }
        // 通过response的outputStream写入新的数据
        ServletOutputStream outputStream = response.getOutputStream();
        outputStream.write(JSON.toJSONBytes(ResponseData.ok(JSON.parse(b))));
    }


    /**
     * 跳过swagger路径
     *
     * @param request
     * @return
     */
    @Override
    protected boolean shouldNotFilter(HttpServletRequest request) {
        //过滤掉swagger路径
        String path = request.getRequestURI().substring(request.getContextPath().length()).replaceAll("[/]+$", "");
        return ALLOWED_PATH.stream().anyMatch(path::startsWith) || StringUtils.isBlank(path);
    }
}

原文链接:https://blog.csdn.net/weixin_43915643/article/details/122420505

栏目分类
最近更新