关于跨域问题的处理Access-Control-Allow-Headers涉及到UA

作者: Tscccn | 日期: 2021 年 05 月 07 日 | 围观: 1224次+ 发表评论 (1) 查看评论

Access to XMLHttpRequest at ‘http://api.XXXXXXXXXXX.com/v1/gethome?homeid=1&sign=473f963206afab4c3f0ea4340cb02c91′ from origin ‘http://m.XXXXXXXXXXXXX.com’ has been blocked by CORS policy: Request header field clientflag is not allowed by Access-Control-Allow-Headers in preflight response.

在NGINX内增加如下配置：

 add_header Access-Control-Allow-Origin '*'; # 根据自己实际情况改变域范围
add_header Access-Control-Allow-Credentials 'true';
add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS';

add_header Access-Control-Allow-Origin '*'; # 根据自己实际情况改变域范围

add_header Access-Control-Allow-Credentials 'true';

add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS';

add_header Access-Control-Allow-Headers 'Origin,Access-Control-Request-Headers,Access-Control-Allow-Headers,DNT,X-Requested-With,X-Mx-ReqToken,Keep-Alive,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Accept,Connection,Cook ie,X-XSRF-TOKEN,X-CSRF-TOKEN,Authorization';

1	add_header Access-Control-Allow-Headers 'Origin,Access-Control-Request-Headers,Access-Control-Allow-Headers,DNT,X-Requested-With,X-Mx-ReqToken,Keep-Alive,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Accept,Connection,Cook ie,X-XSRF-TOKEN,X-CSRF-TOKEN,Authorization';