快捷導(dǎo)航

SpringBoot全局跨域配置實(shí)踐

更新時間：2026年01月06日 08:41:50 作者：amadeus_liu2

文章介紹了如何在Spring Boot中通過配置類配置全局跨域,避免在每個Controller上使用@CrossOrigin注解,適用于返回字符串或?qū)ο蟮慕涌?以及通過ResponseEntity提供文件下載的接口,但不適用于直接使用HttpServletResponse的接口

一、可以在配置類中通過配置一個@Bean

直接實(shí)現(xiàn)全局的跨域，不需要在每個controller上加@CrossOrigin注解了。

package cn.edu.tju.config;

import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.servlet.config.annotation.CorsRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
@Configuration(proxyBeanMethods = false)
public class MyCorsConfig {
    @Bean
    public WebMvcConfigurer corsConfigurer() {
        return new WebMvcConfigurer() {
            @Override
            public void addCorsMappings(CorsRegistry registry) {
                registry.addMapping("/**");
            }
        };
    }


}

二、適用情況

1、返回字符串或?qū)ο蟮慕涌?/p>

    @RequestMapping("/getRate")
    public String getRate(){
        return "rate...";
    }

2.通過ResponseEntity提供文件下載功能的接口

    @RequestMapping(value="/get/csv")
    public ResponseEntity<byte[]> download(HttpServletRequest request)throws Exception{
        String content="first,second,third";
        ResponseEntity.BodyBuilder builder = ResponseEntity.ok();
        builder.contentLength(content.length());
        builder.contentType(MediaType.APPLICATION_OCTET_STREAM);
        String fileName = URLEncoder.encode("download.csv", "UTF-8");
        builder.header("Content-Disposition", "attachment; filename*=UTF-8''" + fileName);

        return builder.body(content.getBytes());
    }

三、不適用的情況

直接適用HttpServletResponse進(jìn)行內(nèi)容返回的接口。需要將注釋的部分打開才能跨域

    @RequestMapping("/get/csv2")
    public void getCSV2(HttpServletResponse response) {

        String resultString="first,second,third";
        byte[] bytes = resultString.getBytes();
        response.reset();// 清空輸出流
        response.setContentType("application/x-download");
        response.setCharacterEncoding("UTF-8");
        response.addHeader("Content-Disposition", "attachment;filename=" + "test" + ".csv");

/*        response.addHeader("Access-Control-Allow-Origin", "*");
        response.addHeader("Access-Control-Allow-Methods", "POST,GET,OPTIONS,DELETE");
        response.addHeader("Access-Control-Max-Age", "9600");
        response.addHeader("Access-Control-Allow-Headers", "x-requested-with");*/


        try {
            OutputStream os = response.getOutputStream();
            ByteArrayInputStream bais = new ByteArrayInputStream(bytes);
            response.setHeader("Content-Length", String.valueOf(bais.available()));
            byte[] b = new byte[1024];
            while ((bais.read(b)) > 0) {
                os.write(b);
            }
            bais.close();
            os.flush();
            os.close();
        } catch (Exception ex) {
            System.out.println(ex.getMessage());
        }
    }