github/dataease
github/dataease
3
0
Fork 1
mirror of https://github.com/dataease/dataease.git synced 2025-02-25 03:52:59 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Merge pull request #13624 from dataease/pr@dev-v2@perf_cors_config

Browse Source 
feat: 增加是否严格校验跨域配置
This commit is contained in:
xuwei-fit2cloud 2024-11-28 11:05:12 +08:00 committed by GitHub
commit 1186bb7f89
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 10 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
sdk/common/src/main/java/io/dataease/auth/interceptor/CorsConfig.java
View File

@ -15,6 +15,9 @@ import java.util.List;
@Configuration
public class CorsConfig implements WebMvcConfigurer {
@Value("${dataease.cors-strict:false}")
private boolean corsStrict;
@Value("#{'${dataease.origin-list:http://127.0.0.1:8100}'.split(',')}")
private List<String> originList;
@ -29,15 +32,19 @@ public class CorsConfig implements WebMvcConfigurer {
@Override
public void addCorsMappings(CorsRegistry registry) {
operateCorsRegistration = registry.addMapping("/**")
.allowCredentials(true)
.allowedOrigins(originList.toArray(new String[0]))
.allowCredentials(false)
.allowedHeaders("*")
.maxAge(3600)
.allowedMethods("GET", "POST", "DELETE");
if (corsStrict) {
operateCorsRegistration.allowedOrigins(originList.toArray(new String[0]));
return;
}
operateCorsRegistration.allowedOrigins("*");
}
public void addAllowedOrigins(List<String> origins) {
if (CollectionUtils.isEmpty(origins)) {
if (!corsStrict || CollectionUtils.isEmpty(origins)) {
return;
}
origins.addAll(originList);