java -- 基础 -- 网络相关_org.springframework.web.servlet.mvc.method.annotat

作者：2023面试高手 | 2024-03-13 17:33:32

踩

org.springframework.web.servlet.mvc.method.annotation public interface respo

转载地址： https://segmentfault.com/a/1190000011145364

1、通过 jsonp 跨域

配置类


package com.sample.common.advice;
 
import com.sample.modules.web.controller.JsonpController;
import org.springframework.web.bind.annotation.ControllerAdvice;
import org.springframework.web.servlet.mvc.method.annotation.AbstractJsonpResponseBodyAdvice;
 
//配置jsonp，这里选择了 JsonpController
@ControllerAdvice(basePackageClasses = {JsonpController.class})
public class JSONPConfiguration extends AbstractJsonpResponseBodyAdvice {
    public JSONPConfiguration(){
        super("callback","jsonp");
    }
}

控制器


package com.sample.modules.web.controller;
 
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RestController;
 
import java.util.HashMap;
import java.util.Map;
 
@RestController
public class JsonpController {
 
    @RequestMapping(value = "/jsonp")
    public Map<String, Object> jsonp(){
        Map<String, Object> result = new HashMap<>();
        result.put("username", "admin");
        return result;
    }
}

网页文件


<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8">
        <title></title>
        <script src="https://cdn.bootcss.com/jquery/3.4.1/jquery.min.js"></script>
    </head>
    <body>
    </body>
    <script>
        $(function(){
            $.ajax({
                type:"get",
                dataType: 'jsonp',
                jsonpCallback: "jsonpcallback",
                url:"http://www.test001.com:8080/jsonp"
            });
        })		
		
        function jsonpcallback(result){
            alert(JSON.stringify(result))
        }
    </script>
</html>

2、通过跨域资源共享（CORS）

配置类


package com.sample.common.config;
 
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.cors.CorsConfiguration;
import org.springframework.web.cors.UrlBasedCorsConfigurationSource;
import org.springframework.web.filter.CorsFilter;
 
@Configuration
public class CorsConfig {
 
    private CorsConfiguration buildConfig() {
        CorsConfiguration corsConfiguration = new CorsConfiguration();
        corsConfiguration.addAllowedOrigin("*"); // 1允许任何域名使用
        corsConfiguration.addAllowedHeader("*"); // 2允许任何头
        corsConfiguration.addAllowedMethod("*"); // 3允许任何方法（post、get等）
        return corsConfiguration;
    }
 
    @Bean
    public CorsFilter corsFilter() {
        UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
        source.registerCorsConfiguration("/**", buildConfig()); // 4
        return new CorsFilter(source);
    }
}

网页文件


<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8">
        <title></title>
        <script src="https://cdn.bootcss.com/jquery/3.4.1/jquery.min.js"></script>
    </head>
    <body>
    </body>
    <script>
        $(function(){
            $.ajax({
                type:"get",
                dataType: 'json',
                url:"http://www.test001.com:8080/jsonp",
                success: function(result){
                    alert(JSON.stringify(result))
                }
            });
        })		
    </script>
</html>

注意事项


response.setHeader("Access-Control-Allow-Origin", "http://localhost:4001");
 
//添加了Credentials, Origin不能为*, 必须指定
response.addHeader("Access-Control-Allow-Credentials", "true");
response.setHeader("Access-Control-Allow-Methods", "*");
 
//需要配置header
response.setHeader("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type,token,Accept, Connection, User-Agent, Cookie");
response.setHeader("Access-Control-Max-Age", "3600");

3、防盗链


package com.vim.modules.web;
 
import javax.servlet.*;
import javax.servlet.annotation.WebFilter;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
 
@WebFilter(urlPatterns = "/images/*")
public class ChainStealingFilter implements Filter{
 
    @Override
    public void init(FilterConfig filterConfig) throws ServletException {
 
    }
 
    @Override
    public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain chain) throws IOException, ServletException {
        HttpServletRequest request = (HttpServletRequest)servletRequest;
        HttpServletResponse response = (HttpServletResponse)servletResponse;
 
        String referer = request.getHeader("referer");
        String serverName = request.getServerName();
 
        if(referer == null || !(referer.contains(serverName))){
            request.getRequestDispatcher("/images/error.jpg").forward(request, response);
            return;
        }
        chain.doFilter(request, response);
    }
 
    @Override
    public void destroy() {
 
    }
}

声明：本文内容由网友自发贡献，不代表【wpsshop博客】立场，版权归原作者所有，本站不承担相应法律责任。如您发现有侵权的内容，请联系我们。转载请注明出处：https://www.wpsshop.cn/w/2023面试高手/article/detail/229781