【发布时间】:2019-03-04 14:59:50
【问题描述】:
请求的资源上不存在“Access-Control-Allow-Origin”标头。 Origin 'http://localhost:4200' 因此不允许访问。
request = request.clone({
setHeaders: {
'Content-Type': 'application/json',
'Access-Control-Allow-Origin': 'http://localhost:4200',
Authorization: 'Bearer ' + this.authToken
},
});
在后端服务器我们设置允许跨源如下
response.setHeader("Access-Control-Allow-Origin", "*");
System.out.println("Request header: " + request.getHeader("Origin"));
response.setHeader("Access-Control-Allow-Credentials", "true");
response.setHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS, DELETE");
response.setHeader("Access-Control-Max-Age", "3600");
response.setHeader("Access-Control-Allow-Headers", "Authorization, X-PINGOTHER, Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Origin");
但我们仍然没有获得访问控制允许来源出现在所请求的资源上。
【问题讨论】:
标签: angular