SpringBoot+Spring Security无法实现跨域的解决方案

import org.slf4j.logger;

import org.slf4j.loggerfactory;

import org.springframework.beans.factory.annotation.value;

import org.springframework.boot.autoconfigure.autoconfigurebefore;

import org.springframework.context.annotation.configuration;

import org.springframework.format.formatterregistry;

import org.springframework.web.servlet.config.annotation.*;

@configuration

@autoconfigurebefore (securityconfig. class )

public class mymvcconfigurer implements webmvcconfigurer {

     public void addcorsmappings(corsregistry registry){

         logger.info( "跨域已设置" );

         registry.addmapping( "/**" )

                 .allowedorigins( "*" )

                 .allowedmethods( "*" )

                 .allowedheaders( "*" )

                 .allowcredentials( true )

                 .maxage( 3600 );

     }

}

@configuration

@autoconfigurebefore (swagger2configuration. class )

@enablewebsecurity

@enableglobalmethodsecurity (prepostenabled = true )

@order (- 1 )

public class securityconfig extends websecurityconfigureradapter {

     @override

     protected void configure(httpsecurity http) throws exception {

         http.formlogin()

                 .loginprocessingurl( "/user/login" )

                 .loginpage( "/singin.html" )

                 .successhandler(moyuauthenticationsuccesshandler)

                 .failurehandler(moyuauthenticationfailurehandler)

                 .and()

                 .apply(moyusocialsecurityconfig)

                 .and()

                 .rememberme()

                 .tokenrepository(persistenttokenrepository())

                 .tokenvalidityseconds( 3600 * 24 * 7 )

                 .userdetailsservice(userdetailsservice)

                 .and()

                 .authorizerequests()

                 .antmatchers( "/user/login" , "/login" , "/singin.html" , "**" , "/**" ).permitall()

                 .anyrequest()

                 .authenticated()

                 .and()

                 .cors()

                 .and()

                 .csrf().disable();

     }

}

.and()

.cors() //新加入

.and()

.csrf().disable();

@bean

     public corsfilter corsfilter() {

         final urlbasedcorsconfigurationsource urlbasedcorsconfigurationsource = new       urlbasedcorsconfigurationsource();

         final corsconfiguration corsconfiguration = new corsconfiguration();

         corsconfiguration.setallowcredentials( true );

         corsconfiguration.addallowedorigin( "*" );

         corsconfiguration.addallowedheader( "*" );

         corsconfiguration.addallowedmethod( "*" );

         urlbasedcorsconfigurationsource.registercorsconfiguration( "/**" , corsconfiguration);

         return new corsfilter(urlbasedcorsconfigurationsource);

     }

@override

    public void configure(httpsecurity http) throws exception {

        expressionurlauthorizationconfigurer<httpsecurity>.expressionintercepturlregistry registry

        = http.authorizerequests();

        registry.requestmatchers(corsutils::ispreflightrequest).permitall(); //让spring security放行所有preflight request

    }