JAVA拦截器，JAVA返回结果跨域问题解决-has been blocked by CORS policy

遇到的问题：

通过拦截器做权限控制，没有权限时返回了json值，结果前端请求时提示跨域了

备注：我的前端站点和后端站点不是一个地址

报错1：

代码语言：javascript

复制

Access to XMLHttpRequest at 'http://localhost:8089/appcicd/appinfo/getappinfos' from origin 'http://localhost:8000' has been blocked by CORS policy: The 'Access-Control-Allow-Origin' header has a value 'http://localhost:8089/' that is not equal to the supplied origin.
Index.js:79 Error: Network Error
    at createError (createError.js:16)

报错2：

代码语言：javascript

复制

Access to XMLHttpRequest at 'http://localhost:8089/appcicd/appinfo/getappinfos' from origin 'http://localhost:8000' has been blocked by CORS policy: The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'. The credentials mode of requests initiated by the XMLHttpRequest is controlled by the withCredentials attribute.

has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

说明：

报错1是完全没设置允许跨域，报错2是设置了允许跨域，但是跨域的域名设置了*，不允许设置*通配符导致的

解决方法：

1、解析请求来源的域名

2、将请求的域名设置为允许跨域

具体代码实现如下：

代码语言：javascript

复制

@Override

public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws IOException {
            response.setCharacterEncoding(&#34;UTF-8&#34;);//设置编码格式
            response.setContentType(&#34;application/json;charset=UTF-8&#34;);

            String originalURL = request.getHeader(&#34;Origin&#34;);
            if (originalURL != null) {
                logger.info(&#34; Origin=&#34;, request.getHeader(&#34;Origin&#34;));
                response.addHeader(&#34;Access-Control-Allow-Origin&#34;, originalURL);
            }
            response.addHeader(&#34;Access-Control-Allow-Credentials&#34;, &#34;true&#34;);
            ServletOutputStream outputStream = response.getOutputStream();
            JSONObject result = new JSONObject();
            result.put(&#34;respCode&#34;, -11);
            result.put(&#34;errMsg&#34;, &#34;用户没有此操作权限!&#34;);

            outputStream.write(JSONObject.toJSONString(result).getBytes());

            return false;

}