Ambassador-08-跨域

官方文档：https://www.getambassador.io/docs/latest/topics/using/cors/

Cross-Origin Resource Sharing-CORS

CORS的配置可以设置在ambassador的Module或者Mapping中，当CORS设置在Module或者Mapping中时，ambassador拦截OPTIONS请求，请响应CORS头。这意味着您将不需要在你的upstreams中实现任何逻辑来处理这些CORS选项请求。

设置cors属性

将以下域名设置到Access-Control-Allow-Origin头中，如果允许所有域名，可以设置成“*”

origins:
- http://foo.example
- http://bar.example

设置允许的方法到Access-Control-Allow-Methods

methods:
- GET
- POST
- OPTIONS

可以设置数据格式headers: Content-Type，到Access-Control-Allow-Headers

headers:
- Content-Type

credentials 对应Access-Control-Allow-Credentials

exposed_headers 对应Access-Control-Expose-Headers

例子：

---
apiVersion: getambassador.io/v2
kind:  Mapping
metadata:
  name:  cors
spec:
  prefix: /cors/
  service: cors-example
  cors:
    origins: http://foo.example,http://bar.example
    methods: POST, GET, OPTIONS
    headers: Content-Type
    credentials: true
    exposed_headers: X-Custom-Header
    max_age: "86400"

Spring Boot 2.0.1 中跨域

@EnableWebSecurity
class SecurityConfig extends WebSecurityConfigurerAdapter {
    public void configure(final HttpSecurity http) throws Exception {
        http
            .cors().configurationSource(new PermissiveCorsConfigurationSource()).and()
            .csrf().disable()
            .authorizeRequests()
                .antMatchers("**").permitAll();
    }
    private static class PermissiveCorsConfigurationSource implements CorsConfigurationSource {
        /**
         * Return a {@link CorsConfiguration} based on the incoming request.
         *
         * @param request
         * @return the associated {@link CorsConfiguration}, or {@code null} if none
         */
        @Override
        public CorsConfiguration getCorsConfiguration(final HttpServletRequest request) {
            final CorsConfiguration configuration = new CorsConfiguration();
            configuration.setAllowCredentials(true);
            configuration.setAllowedHeaders(Collections.singletonList("*"));
            configuration.setAllowedMethods(Collections.singletonList("*"));
            configuration.setAllowedOrigins(Collections.singletonList("*"));
            return configuration;
        }
    }
}