fix: 跨域维护

src/main/java/com/jsl/oa/config/filter/CorsFilter.java

@@ -1,6 +1,7 @@
 package com.jsl.oa.config.filter;
 
 import lombok.extern.slf4j.Slf4j;
+import org.jetbrains.annotations.NotNull;
 import org.springframework.stereotype.Component;
 
 import javax.servlet.*;
@@ -15,8 +16,8 @@ public class CorsFilter implements Filter {
         HttpServletResponse response = (HttpServletResponse) res;
         HttpServletRequest request = (HttpServletRequest) req;
 
-        // 允许跨域请求
-        response.setHeader("Access-Control-Allow-Origin", request.getHeader("Origin"));
+        // 设置请求头
+        setHeader(response);
 
         try {
             chain.doFilter(request, response);
@@ -25,10 +26,22 @@ public class CorsFilter implements Filter {
         }
     }
 
-    public void init(FilterConfig filterConfig) {}
+    public void init(FilterConfig filterConfig) {
+    }
 
     public void destroy() {
         Filter.super.destroy();
     }
 
+    protected static void setHeader(@NotNull HttpServletResponse response) {
+        // 允许跨域请求
+        response.setHeader("Access-Control-Allow-Origin", "*");
+        response.setHeader("Access-Control-Allow-Credentials", "true");
+        //允许请求方式
+        response.setHeader("Access-Control-Allow-Methods", "POST, PUT, GET, OPTIONS, DELETE");
+        response.setHeader("Access-Control-Max-Age", "3600");
+        //需要放行header头部字段 如需鉴权字段，自行添加，如Authorization
+        response.setHeader("Access-Control-Allow-Headers", "*");
+    }
+
 }

src/main/java/com/jsl/oa/config/filter/JwtFilter.java

@@ -66,7 +66,7 @@ public class JwtFilter extends BasicHttpAuthenticationFilter {
     protected boolean onAccessDenied(ServletRequest request, ServletResponse response, Object mappedValue) throws Exception {
         // 添加跨域禁止
         HttpServletResponse httpServletResponse = (HttpServletResponse) response;
-        httpServletResponse.setHeader("Access-Control-Allow-Origin", "*");
+        CorsFilter.setHeader(httpServletResponse);
         // 程序执行
         try {
             // 尝试获取Authorization Header