拜托,我需要你的帮助。 我认为问题出在 Spring Security 上。 我有一个基于 Spring Boot 的后端,前端基于 Angular 5。 当我尝试向后端发送发布请求时,我遇到了这个问题:
访问位于“http://localhost:8080/administrateurs”的 XMLHttpRequest '来自原点'http://localhost:4200 ' 已被 CORS 策略阻止:对预检请求的响应未通过访问控制检查:预检请求不允许重定向。
RestController:
package smart.syndic.web;
import java.util.List;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
import org.springframework.web.bind.annotation.CrossOrigin;
import org.springframework.web.bind.annotation.PathVariable;
import org.springframework.web.bind.annotation.RequestBody;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;
import org.springframework.web.bind.annotation.RestController;
import smart.syndic.dao.AdministrateursRepository;
import smart.syndic.entities.Administrateurs;
@RestController
@CrossOrigin("*")
public class AdministrateursRestController
{
@Autowired
private AdministrateursRepository repository;
@Autowired
private BCryptPasswordEncoder bCryptPasswordEncoder;
@RequestMapping(value="/administrateurs", method=RequestMethod.POST)
public Administrateurs postOne(@RequestBody Administrateurs s)
{
String password = s.getPassword();
String encryptedPassword = bCryptPasswordEncoder
.encode(password);
s.setPassword(encryptedPassword);
return repository.save(s);
}
}
Spring Security 的 SecurityConfig 类:
package smart.syndic.security;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.authentication
.builders.AuthenticationManagerBuilder;
import org.springframework.security.config.annotation.web
.builders.HttpSecurity;
import org.springframework.security.config.annotation.web
.configuration.EnableWebSecurity;
import org.springframework.security.config.annotation.web.
configuration.WebSecurityConfigurerAdapter;
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter
{
@Override
protected void configure(AuthenticationManagerBuilder auth) throws
Exception
{
auth.inMemoryAuthentication()
.withUser("admin").password("1234")
.roles("ADMIN");
}
@Bean
public BCryptPasswordEncoder bCryptPasswordEncoder()
{
return new BCryptPasswordEncoder();
}
@Override
protected void configure(HttpSecurity http) throws Exception
{
http.csrf().disable();
http.authorizeRequests().antMatchers("/login/**").permitAll();
http.formLogin().loginPage("/login")
.and().exceptionHandling().accessDeniedPage("/forbidden");
http.authorizeRequests().anyRequest().authenticated();
//When i remove this code it's works
}
}
Angular 服务:
import {Injectable} from "@angular/core";
import {HttpClient, HttpHeaders, HttpParams, HttpRequest} from
"@angular/common/http";
@Injectable()
export class LoginService
{
host:any = "http://localhost:8080/";
constructor(private http:HttpClient)
{
}
ajouterAdministrateurs(model:any)
{
return this.http.post(this.host + "administrateurs", model);
}
谢谢。
最佳答案
希望这有帮助。
public ajouterAdministrateurs(model: any) {
const headers = new HttpHeaders({
"Content-Type": "application/json",
Authorization: "Basic " + btoa("username:password") //add your username and password of spring security
});
return this.http.post(this.host, model, {
headers
});
}
关于Java : Cannot send POST request to backend with Angular 5,我们在Stack Overflow上找到一个类似的问题: https://stackoverflow.com/questions/54109171/