여기서 교차 도메인이 무엇인지 자세히 설명하지 않겠습니다. 여기서 주요 초점은 thinkphp5.1입니다. 우선 일반적인 솔루션 아이디어에 대해 이야기하겠습니다. , 프론트 엔드는 직접 작성했기 때문에 axios 구성에서 다음과 같이 설정했습니다.
withCredentials: true // 도메인 간 요청 중에 쿠키 보내기axios配置中, 我设置了如下
withCredentials: true // 跨域请求时发送cookie
// 创建一个axios
const service = axios.create({
baseURL: URL ,
withCredentials: true, // 跨域请求时发送cookie
timeout: 5000 // request timeout
})
在后端的配置中,配置的是
header("Access-Control-Allow-Origin: *");
故而抛出了这样一个错误
Access to XMLHttpRequest at 'http://store.ink/admin/me?sid=lbn3mpacfb3k1mbehnk9qh8kf3' from origin 'http://vue-admin-web.ink' has been blocked by CORS policy: The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'. The credentials mode of requests initiated by the XMLHttpRequest is controlled by the withCredentials attribute.
意思大概为 设置 withCredentials 为 true 时, origin 是不允许为 *的, origin必须设置为来源的地址
也就是 http://a.com 请求 http://b.com 的时候, http://a.com 必须设置origin 为 http://b.com 才能通过
最后参阅配置如下
$origin = $_SERVER['HTTP_ORIGIN'] ?? '*';
header("Access-Control-Allow-Origin: $origin");
header('Access-Control-Allow-Credentials: true');
header('Access-Control-Allow-Headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-Requested-With');
header('Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE');
header('Access-Control-Max-Age: 1728000');
当然, 为 * 的时候也可以这样
header("Access-Control-Allow-Origin: *");
header('Access-Control-Allow-Headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-Requested-With');
header('Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE');
header('Access-Control-Max-Age: 1728000');
首先 定义个中间件 php think make:middleware CrossDomain
<?php namespace app\http\middleware;
use think\Response;
class CrossDomain
{
public function handle($request, \Closure $next)
{
$origin = $_SERVER['HTTP_ORIGIN'] ?? '*';
header("Access-Control-Allow-Origin: $origin");
header('Access-Control-Allow-Credentials: true');
header('Access-Control-Allow-Headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-Requested-With');
header('Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE');
header('Access-Control-Max-Age: 1728000');
return $next($request);
}
}在router.php中
Route::group('', function (){
....
这里写路由
....
})->middleware(['CrossDomain']);然后又有一个新问题
因为如上是走的路由文件,当请求的url
....
public function render(Exception $e)
{
# 这里来处理跨域问题
$origin = $_SERVER['HTTP_ORIGIN'] ?? '*';
header("Access-Control-Allow-Origin: $origin");
header('Access-Control-Allow-Credentials: true');
header('Access-Control-Allow-Headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-Requested-With');
header('Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE');
header('Access-Control-Max-Age: 1728000');
$type = request()->isAjax() ? 'json' : "html";
$response = \think\response\Json::create([], $type, 200, []);
return $response; # response // 在异常处理接管中,必须返回的是一个人response响应, 而不是 `throw new `抛出一个响应
}
... 백엔드 구성에서, 구성이 rrreee
이므로 이러한 오류rrreee
가 발생했습니다. 의미는 아마도withCredentials를 true로 설정하면 원본이 가 될 수 없다는 뜻일 것입니다. *이며, 출발지는 소스 주소즉, http로 설정되어야 합니다. ://a.com이 http://b.com을 요청할 때 http://a.com은 출발지를 http로 설정해야 합니다. ://b.com to pass
