提交配置校验

portal-manager/src/main/java/com/mortals/xhx/base/framework/filter/SameSiteCookieFilter.java

+package com.mortals.xhx.base.framework.filter;
+
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.context.annotation.Profile;
+import org.springframework.stereotype.Component;
+
+import javax.servlet.*;
+import javax.servlet.http.Cookie;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.io.IOException;
+import java.util.Arrays;
+import java.util.HashSet;
+import java.util.Set;
+
+@Slf4j
+@Component
+@Profile({"yanyuan", "test"})
+public class SameSiteCookieFilter implements Filter {
+
+    @Override
+    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)
+            throws IOException, ServletException {
+        HttpServletResponse httpResponse = (HttpServletResponse) response;
+        String []  allowDomain= {"http://localhost:8080","http://192.168.0.98:11072","http://123.16.12.23:8080"};
+        Set allowedOrigins= new HashSet(Arrays.asList(allowDomain));
+        String originHeader=((HttpServletRequest) request).getHeader("Origin");
+        if (allowedOrigins.contains(originHeader)){
+            httpResponse.setHeader("Access-Control-Allow-Origin", originHeader);
+            httpResponse.setContentType("application/json;charset=UTF-8");
+            httpResponse.setHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS, DELETE");
+            httpResponse.setHeader("Access-Control-Max-Age", "3600");
+            httpResponse.setHeader("Access-Control-Allow-Headers", "Content-Type,Access-Token");
+            // 如果要把Cookie发到服务器，需要指定Access-Control-Allow-Credentials字段为true
+            httpResponse.setHeader("Access-Control-Allow-Credentials", "true");
+            httpResponse.setHeader("Access-Control-Expose-Headers", "*");
+        }
+        chain.doFilter(request, response);
+    }
+
+    @Override
+    public void init(FilterConfig filterConfig) throws ServletException {}
+
+    @Override
+    public void destroy() {}
+}