|
|
@@ -25,6 +25,7 @@ import org.springframework.web.cors.UrlBasedCorsConfigurationSource;
|
|
|
|
|
|
import java.util.ArrayList;
|
|
|
import java.util.Arrays;
|
|
|
+import java.util.Collections;
|
|
|
|
|
|
/**
|
|
|
* 配置Spring Security
|
|
|
@@ -135,8 +136,14 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
|
|
|
corsConfiguration.setAllowedHeaders(Arrays.asList("*"));
|
|
|
corsConfiguration.setAllowedMethods(Arrays.asList("*"));
|
|
|
corsConfiguration.setMaxAge(3600L);
|
|
|
- corsConfiguration.setAllowCredentials(true);
|
|
|
- corsConfiguration.setAllowedOrigins(userSetting.getAllowedOrigins());
|
|
|
+ if (userSetting.getAllowedOrigins() != null && !userSetting.getAllowedOrigins().isEmpty()) {
|
|
|
+ corsConfiguration.setAllowCredentials(true);
|
|
|
+ corsConfiguration.setAllowedOrigins(userSetting.getAllowedOrigins());
|
|
|
+ }else {
|
|
|
+ corsConfiguration.setAllowCredentials(false);
|
|
|
+ corsConfiguration.setAllowedOrigins(Collections.singletonList(CorsConfiguration.ALL));
|
|
|
+ }
|
|
|
+
|
|
|
corsConfiguration.setExposedHeaders(Arrays.asList(JwtUtils.getHeader()));
|
|
|
|
|
|
UrlBasedCorsConfigurationSource url = new UrlBasedCorsConfigurationSource();
|