跨域请求允许传cookie

phoenix · Aug 20, 2015 · ab52e38 · ab52e38
1 parent eec9736
commit ab52e38
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/main/java/edu/scup/web/filter/CORSFilter.java b/src/main/java/edu/scup/web/filter/CORSFilter.java
@@ -18,9 +18,9 @@ protected void doFilterInternal(HttpServletRequest request, HttpServletResponse
  if (request.getHeader("Access-Control-Request-Method") != null && "OPTIONS".equals(request.getMethod())) {
  // CORS "pre-flight" request
  response.addHeader("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE");
-// response.addHeader("Access-Control-Allow-Headers", "Authorization");
+ response.setHeader("Access-Control-Allow-Credentials", "true");//允许传cookie
  response.addHeader("Access-Control-Allow-Headers", "Content-Type");
- response.addHeader("Access-Control-Max-Age", "1");
+ response.addHeader("Access-Control-Max-Age", "3600");
  }
 
  filterChain.doFilter(request, response);