ly:
 cors:
  allowedOrigins:
   - http://manage.leyou.com
　 - http://xxx.xxx.com
# 允許哪些網(wǎng)址就繼續(xù)加，不要寫(xiě) *，否則cookie就無(wú)法使用了
  allowedCredentials: true    # 代表攜帶cookie
  allowedHeaders:
   - "*"
  allowedMethods:
   - GET
   - POST
   - DELETE
   - PUT
   - OPTIONS
   - HEAD
  maxAge: 360000
  filterPath: "/**"

@Data
@ConfigurationProperties(prefix = "ly.cors")
public class CORSProperties {
	private List<String> allowedOrigins;
	private Boolean allowedCredentials;
	private List<String> allowedMethods;
	private List<String> allowedHeaders;
	private long maxAge;
	private String filterPath;
}

@Configuration
@EnableConfigurationProperties(CORSProperties.class)
public class GlobalCORSConfig {
	@Autowired
	  private CORSProperties prop;
	/**
   * @Bean注解，將當(dāng)前方法的返回值對(duì)象放入到IOC容器中
   * @return
   */
	@Bean
	  public CorsFilter corsFilter() {
		//1.添加CORS配置信息
		CorsConfiguration config = new CorsConfiguration();
		prop.getAllowedOrigins().forEach(config::addAllowedOrigin);
		//上面的寫(xiě)法和下面這個(gè)效果一樣
		//    for (String allowedOrigin : prop.getAllowedOrigins()) {
		//      config.addAllowedOrigin(allowedOrigin);
		//    }
		//2) 是否發(fā)送Cookie信息
		config.setAllowCredentials(prop.getAllowedCredentials());
		//3) 允許的請(qǐng)求方式
		prop.getAllowedMethods().forEach(config::addAllowedMethod);
		// 4）允許的頭信息
		prop.getAllowedHeaders().forEach(config::addAllowedHeader);
		// 5）有效期
		config.setMaxAge(prop.getMaxAge());
		//2.添加映射路徑，我們攔截一切請(qǐng)求
		UrlBasedCorsConfigurationSource configSource = new UrlBasedCorsConfigurationSource();
		configSource.registerCorsConfiguration(prop.getFilterPath(), config);
		//3.返回新的CORSFilter.
		return new CorsFilter(configSource);
	}
}