From 0d2a5fc482ba7ffaaefa6276e2475727e7160753 Mon Sep 17 00:00:00 2001
From: zhizhijie <zhizhijie@users.noreply.gitee.com>
Date: 星期三, 16 九月 2026 11:31:35 +0800
Subject: [PATCH] fix(cors): 放行内网网段来源，修复局域网 IP 访问时登录 403
---
traffic-audit-server/src/main/java/com/trafficaudit/common/config/CorsConfig.java | 12 +++++++-----
1 files changed, 7 insertions(+), 5 deletions(-)
diff --git a/traffic-audit-server/src/main/java/com/trafficaudit/common/config/CorsConfig.java b/traffic-audit-server/src/main/java/com/trafficaudit/common/config/CorsConfig.java
index 60d9193..fd7cba6 100644
--- a/traffic-audit-server/src/main/java/com/trafficaudit/common/config/CorsConfig.java
+++ b/traffic-audit-server/src/main/java/com/trafficaudit/common/config/CorsConfig.java
@@ -12,14 +12,16 @@
import java.util.List;
/**
- * 璺ㄥ煙閰嶇疆锛氬彧鍏佽閰嶇疆涓垪鍑虹殑鏉ユ簮璁块棶鎺ュ彛銆�
- * 鍓嶅悗绔垎绂绘湰鍦板紑鍙戦粯璁ゆ斁琛� 8080锛涘墠绔粡 dev-server 浠ｇ悊鎴栦笌鍚庣鍚屾簮閮ㄧ讲鏃跺潎涓嶉渶瑕侀澶栨斁琛屻��
+ * 璺ㄥ煙閰嶇疆锛氬彧鍏佽閰嶇疆涓垪鍑虹殑鏉ユ簮锛堟敮鎸� * 閫氶厤锛夎闂帴鍙ｃ��
+ * 娴忚鍣ㄥ彂璧� POST/PUT/DELETE 鏃朵細甯� Origin 澶达紙GET 涓嶅甫锛夛紝鍥犳鐢ㄥ眬鍩熺綉 IP 鎵撳紑椤甸潰鏃讹紝
+ * 鑻ヨ鏉ユ簮涓嶅湪鏀捐鍒楄〃鍐呬細琚� CorsFilter 鍒や负闈炴硶骞惰繑鍥� 403锛岃〃鐜颁负鐧诲綍鏃舵彁绀衡�滅綉缁滈敊璇�濄��
+ * 榛樿鏀捐鏈満涓庡唴缃戠綉娈电殑浠绘剰绔彛锛堟湰鍦板紑鍙戙�佸眬鍩熺綉璁块棶銆両P 鏂瑰紡璁块棶 8090 鍚屾簮閮ㄧ讲閮借鐩栵級銆�
* 娉ㄦ剰锛氫笉寮�鍚� allowCredentials锛堟帴鍙ｇ敤 Bearer 浠ょ墝閴存潈锛屼笉渚濊禆 Cookie锛夛紝閬垮厤浠绘剰绔欑偣鎼哄甫鍑瘉璋冪敤銆�
*/
@Configuration
public class CorsConfig {
- @Value("${app.cors.allowed-origins:http://localhost:8080,http://127.0.0.1:8080}")
+ @Value("${app.cors.allowed-origins:http://localhost:*,http://127.0.0.1:*,http://192.168.*:*,http://10.*:*,http://172.*:*}")
private String allowedOrigins;
private List<String> originList() {
@@ -29,7 +31,7 @@
@Bean
public CorsConfigurationSource corsConfigurationSource() {
CorsConfiguration config = new CorsConfiguration();
- config.setAllowedOrigins(originList());
+ config.setAllowedOriginPatterns(originList());
config.setAllowedHeaders(Arrays.asList("Authorization", "Content-Type", "Accept", "X-Requested-With"));
config.setAllowedMethods(Arrays.asList("GET", "POST", "PUT", "DELETE", "OPTIONS"));
config.setAllowCredentials(false);
@@ -43,4 +45,4 @@
public CorsFilter corsFilter() {
return new CorsFilter(corsConfigurationSource());
}
-}
\ No newline at end of file
+}
--
Gitblit v1.9.1