• 技术文章 >php框架 >ThinkPHP

    解析thinkphp withCredentials跨域问题解决思路

    藏色散人藏色散人2021-02-17 09:22:29转载154


    thinkphp withCredentials 跨域问题解决思路

    跨域是什么这里就不细讲, 这里主要是thinkphp5.1, 说一下大概的解决思路

    首先,因为前端是自己写的, 在axios配置中, 我设置了如下

    withCredentials: true // 跨域请求时发送cookie

    // 创建一个axios
    const service = axios.create({
      baseURL: URL , 
      withCredentials: true, // 跨域请求时发送cookie
      timeout: 5000 // request timeout
    })

    在后端的配置中,配置的是

    header("Access-Control-Allow-Origin: *");

    故而抛出了这样一个错误

    Access to XMLHttpRequest at 'http://store.ink/admin/me?sid=lbn3mpacfb3k1mbehnk9qh8kf3' from origin 'http://vue-admin-web.ink' has been blocked by CORS policy: The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'. The credentials mode of requests initiated by the XMLHttpRequest is controlled by the withCredentials attribute.

    意思大概为 设置 withCredentialstrue 时, origin 是不允许为 *的, origin必须设置为来源的地址

    也就是 http://a.com 请求 http://b.com 的时候, http://a.com 必须设置origin 为 http://b.com 才能通过

    最后参阅配置如下

     $origin = $_SERVER['HTTP_ORIGIN'] ?? '*';
            header("Access-Control-Allow-Origin: $origin");
            header('Access-Control-Allow-Credentials: true');
            header('Access-Control-Allow-Headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-Requested-With');
            header('Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE');
            header('Access-Control-Max-Age: 1728000');

    当然, 为 * 的时候也可以这样

    header("Access-Control-Allow-Origin: *");
            header('Access-Control-Allow-Headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-Requested-With');
            header('Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE');
            header('Access-Control-Max-Age: 1728000');

    首先 定义个中间件 php think make:middleware CrossDomain

    <?php
    namespace app\http\middleware;
    
    use think\Response;
    
    
    class CrossDomain
    {
        public function handle($request, \Closure $next)
        {
            $origin = $_SERVER['HTTP_ORIGIN'] ?? '*';
            header("Access-Control-Allow-Origin: $origin");
            header('Access-Control-Allow-Credentials: true');
            header('Access-Control-Allow-Headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-Requested-With');
            header('Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE');
            header('Access-Control-Max-Age: 1728000');
    
            return $next($request);
        }
    }

    router.php

    Route::group('', function (){
        ....
        这里写路由
        ....
    })->middleware(['CrossDomain']);

    然后又有一个新问题

    因为如上是走的路由文件,当请求的url匹配路由的时候, 会走跨域中间件, 当大家都知道的是, delete 和 put 等方法是会提前发起一个options请求的, 也就是无法匹配路由文件,无法走跨域中间件

    故而:

    定义一个 错误异常接管 https://www.kancloud.cn/manual/thinkphp5_1/354092#_42

    ....
    public function render(Exception $e)
    {
        # 这里来处理跨域问题 
        $origin = $_SERVER['HTTP_ORIGIN'] ?? '*';
        header("Access-Control-Allow-Origin: $origin");
        header('Access-Control-Allow-Credentials: true');
        header('Access-Control-Allow-Headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-Requested-With');
        header('Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE');
        header('Access-Control-Max-Age: 1728000');
        $type = request()->isAjax() ? 'json' : "html";
        $response = \think\response\Json::create([], $type, 200, []);
        return $response; # response  // 在异常处理接管中,必须返回的是一个人response响应, 而不是 `throw new `抛出一个响应
    }
    ...

    完成。

    以上就是解析thinkphp withCredentials跨域问题解决思路的详细内容,更多请关注php中文网其它相关文章!

    本文转载于:segmentfault,如有侵犯,请联系a@php.cn删除
    专题推荐:thinkphp 中间件
    上一篇:关于xampp环境下thinkphp5二维码的生成方法 下一篇:比较ThinkPHP5和无框架代码在高并发下的效率
    第15期线上培训班

    相关文章推荐

    • ThinkPHP数据库操作之聚合查询、时间查询、高级查询• ThinkPHP数据库操作之存储过程、数据集、分布式数据库• ThinkPHP数据库操作之查询事件、事务操作、监听SQL• ThinkPHP数据库操作之视图查询、子查询、原生查询• thinkphp模块怎么改名

    全部评论我要评论

  • 取消发布评论发送
  • 1/1

    PHP中文网