如何在Grails websocket插件中启用跨域请求

提问者：小点点

如何在Grails websocket插件中启用跨域请求

我试图覆盖Grails的Spring websocket插件的默认配置，如下所示：

@Configuration
@EnableWebSocketMessageBroker
class CorsWebSocketConfig extends AbstractWebSocketMessageBrokerConfigurer {

    @Override
    void configureMessageBroker(MessageBrokerRegistry messageBrokerRegistry) {
        messageBrokerRegistry.enableSimpleBroker "/queue", "/topic"
        messageBrokerRegistry.setApplicationDestinationPrefixes "/app"
    }

    @Override
    void registerStompEndpoints(StompEndpointRegistry stompEndpointRegistry) {
        StompWebSocketEndpointRegistration registration = stompEndpointRegistry.addEndpoint("/stomp")
        registration.setAllowedOrigins('http://localhost', 'http://localhost:8080')
        registration.withSockJS().setSupressCors(false)
    }

   // [...]
}

我也尝试过做一个. setAllowe起源('*'), 但它仍然不起作用。

但是，当我注册我的客户端时，永远不会在 /stomp/infoendpoint上设置“Access-Control-Allow-Origin”标头。我总是得到“XMLHttpRequest无法加载http://localhost:8080/app/stomp/info.请求的资源上没有'Access-Control-Allow-Origin'标头。因此不允许访问源http://localhost。”

共2个答案

匿名用户

我使用https://github.com/davidtinker/grails-cors.Grails-cors插件不适用于grails 3. x的信息解决了这个问题，但是repo自述文件中有一些信息。我将在这里复制/粘贴它：

这个插件不适用于Grails 3。要处理Grails 3项目中的CORS，您可以在src/main/java下的某个地方创建一个servlet过滤器：

@Priority(Integer.MIN_VALUE)
public class CorsFilter extends OncePerRequestFilter {

    public CorsFilter() { }

    @Override
    protected void doFilterInternal(HttpServletRequest req, HttpServletResponse resp, FilterChain chain)
            throws ServletException, IOException {

        String origin = req.getHeader("Origin");

        boolean options = "OPTIONS".equals(req.getMethod());
        if (options) {
            if (origin == null) return;
            resp.addHeader("Access-Control-Allow-Headers", "origin,     authorization, accept, content-type, x-requested-with");
            resp.addHeader("Access-Control-Allow-Methods", "GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS");
            resp.addHeader("Access-Control-Max-Age", "3600");
        }

        resp.addHeader("Access-Control-Allow-Origin", origin == null ? "*" : origin);
        resp.addHeader("Access-Control-Allow-Credentials", "true");

        if (!options) chain.doFilter(req, resp);
    }
}

引用grails-app/conf/Spring/资源. groovy中的过滤器：

beans = {
     corsFilter(CorsFilter)
}

希望这对某人有帮助。

匿名用户

我将grails-3.0.2/grails-spring-websocket-2.0.0示例应用程序推到https://github.com/zyro23/so-30891198这表明它应该可以工作。

curl -H "Origin: http://localhost:8080" --verbose http://localhost:8080/stomp/info
HTTP/1.1 200 OK
Access-Control-Allow-Origin: http://localhost:8080

curl -H "Origin: http://localhost" --verbose http://localhost:8080/stomp/info
HTTP/1.1 200 OK
Access-Control-Allow-Origin: http://localhost

第二个样本使用grails-2.5.0/spring-websocket 1.3.0：https://github.com/zyro23/so-30891198-2

curl -H "Origin: http://localhost:8080" --verbose http://localhost:8080/so-30891198-2/stomp/info
HTTP/1.1 200 OK
Access-Control-Allow-Origin: http://localhost:8080

curl -H "Origin: http://localhost" --verbose http://localhost:8080/so-30891198-2/stomp/info
HTTP/1.1 200 OK
Access-Control-Allow-Origin: http://localhost