laravel5.5 cors has been blocked by CORS policy: Request header field x-csrf-token is not allowed by

约定不等于承诺〃 2022-03-19 15:26 1616阅读 0赞

### 文章目录 ###

*   *   *  场景
         *  参考文档
         *   *  分析
         *  解决

### 场景 ###

*  laravel5.5 一个项目的接口给另外一个项目B使用，所以需要解决跨域的问题
    
     *  定义了api group的middleware CorsMiddleware, 项目B的控制台观察到
        
         *  `has been blocked by CORS policy: Request header field x-csrf-token is not allowed by Access-Control-Allow-Headers in preflight response.`

### 参考文档 ###

*  HTTP 访问控制

#### 分析 ####

*  Access-Control-Allow-Headers 首部字段用于预检请求的响应。其指明了实际请求中允许携带的首部字段。
    
     *  Access-Control-Allow-Headers: \[, \]\*
 *  CorsMiddleware中设置x-csrf-token到预检header允许传递的字段
    
     *  观察了下项目B的预检请求 x-requested-with也是需要传递的字段，所以一起添加了

### 解决 ###

*  设置Access-Control-Allow-Headers

<?php
    
    namespace App\Http\Middleware;
    
    use Closure;
    
    class CorsMiddleware
    { 
        /** * Handle an incoming request. * * @param \Illuminate\Http\Request $request * @param \Closure $next * @return mixed */
        public function handle($request, Closure $next)
        { 
            return $next($request)->header('Access-Control-Allow-Origin', 'https://learn.carsonlius.vip')
                ->header('Access-Control-Allow-Methods', 'GET,POST,PUT,OPTIONS,PATCH,DELETE,HEAD')
                ->header('Access-Control-Allow-Headers', 'x-csrf-token,x-requested-with');
        }
    }

laravel5.5 cors has been blocked by CORS policy: Request header field x-csrf-token is not allowed by

发表评论取消回复

还没有评论，来说两句吧...

相关阅读

相关 blocked by CORS policy: Request header field token is not allowed by Access-Control-Allow-Headers in

相关解决跨域问题 has been blocked by CORS policy: No ‘Access-Control-Allow-Origin‘ header is present

相关 “http://127.0.0.1:8888' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header”

相关解决前端跨域：has been blocked by CORS policy No Access-Control-Allow-Origin header

相关跨域问题(....as been blocked by CORS policy）

相关跨域详解 been blocked by CORS policy: No ‘Access-Control-Allow-Origin‘ header is present on the requeste

相关 has been blocked by CORS policy: The 'Access-Control-Allow-Origin' header contains multiple values '

相关 laravel5.5 cors has been blocked by CORS policy: Request header field x-csrf-token is not allowed by

相关 springboot&ajax&has been blocked by CORS policy: No ‘Access-Control-Allow-Origin

相关 has been blocked by CORS policy: No ‘Access-Control-Allow-Origin‘ header is present on the requested