跨域请求时，预检请求的响应状态码为403无效 + Angular 2 + Java Spring Boot

Question

我正在使用Angular 2向服务器进行API GET调用，并使用以下标头。我的Angular 2代码如下：

let headers = new Headers();
headers.append('Content-Type', 'application/json');
headers.append('Authorization', `${this.publisherAccessTokenVar}`);

let options = new RequestOptions({ headers: headers });

return this.http.get( 'https://blahblah', options)
            .retryWhen((error) => error.delay(this.appConfig.serviceCallRetryDelay))
            .timeout(this.appConfig.serviceCallRetryTimeOut)
            .map((response: Response) => response.json());

我的spring boot CORS代码如下：

HttpServletResponse response = (HttpServletResponse) res;
        response.setHeader("Access-Control-Allow-Origin", ((HttpServletRequest) req).getHeader("Origin"));
        response.setHeader("Access-Control-Allow-Credentials", "true");
        response.setHeader("Access-Control-Allow-Methods", "POST,PUT, GET, OPTIONS, DELETE");
        response.setHeader("Access-Control-Max-Age", "3600");
        response.setHeader("Access-Control-Allow-Headers", "Access-Control-Request-Method,Access-Control-Request-Headers,Content-Type, Accept, X-Requested-With, remember-me, Authorization, X-XSRF-TOKEN");
        chain.doFilter(req, res);

我遇到了以下错误：

OPTIONS http://blah-blah.com/abcd/logout 403 (Forbidden)
XMLHttpRequest cannot load http://blah-blah.com/abcd/logout. Response for preflight has invalid HTTP status code 403

如何解决这个问题？

- clint

---

请点击此处查看有关Spring Security与Angular2在POST、PUT和DELETE请求中出现403 Forbidden错误的解决方案。 - chaoluo

Answer 1

在你的控制器声明之前，需要添加@CrossOrigin。

- Dali Hamzaoui