Nginx解决前端跨域问题CORS跨域配置

先说明一下&＃xff0c;我并不太了解这配置&＃xff0c;没精力去了解太多&＃xff0c;但我觉得其中有一些关键的小注意点&＃xff0c;可能有些初学者不太注意到&＃xff0c;导致配置有问题&＃xff0c;本文章可能只对新手有点帮助&＃xff0c;如果你有好配置&＃xff0c;欢迎评论回复&＃xff0c;让大家学习&＃xff01;

Nginx的CORS配置&＃xff0c;网上太多这配置了&＃xff0c;但大家更多的复制粘贴、转发&＃xff0c;几乎都是类似下面这三两行&＃xff1a;

add_header Access-Control-Allow-Origin *;
add_header Access-Control-Allow-Headers X-Requested-With;
add_header Access-Control-Allow-Methods GET,POST,OPTIONS;

这样有用么&＃xff1f;有用&＃xff0c;我以前这样使用也正常过&＃xff0c;但后来还是遇到问题了&＃xff0c;发现有些项目请求就不成功&＃xff0c;也遇到有些浏览器成功&＃xff0c;有些浏览器不成功&＃xff1b;

我也在网上查找各种资料和调整写法&＃xff0c;最后我调整好的写法&＃xff0c;基本的使用没问题&＃xff0c;我在项目中也一直使用着&＃xff01;

下面发一段我实际项目中的部分配置&＃xff1a;

location /aoda-web {
add_header &＃39;Access-Control-Allow-Origin&＃39; $http_origin;
add_header &＃39;Access-Control-Allow-Credentials&＃39; &＃39;true&＃39;;
add_header &＃39;Access-Control-Allow-Methods&＃39; &＃39;GET, POST, OPTIONS&＃39;;
add_header &＃39;Access-Control-Allow-Headers&＃39; &＃39;DNT,web-token,app-token,Authorization,Accept,Origin,Keep-Alive,User-Agent,X-Mx-ReqToken,X-Data-Type,X-Auth-Token,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range&＃39;;
add_header &＃39;Access-Control-Expose-Headers&＃39; &＃39;Content-Length,Content-Range&＃39;;
if ($request_method &＃61; &＃39;OPTIONS&＃39;) {
add_header &＃39;Access-Control-Max-Age&＃39; 1728000;
add_header &＃39;Content-Type&＃39; &＃39;text/plain; charset&＃61;utf-8&＃39;;
add_header &＃39;Content-Length&＃39; 0;
return 204;
}
root html;
index index.html index.htm;
proxy_pass http://127.0.0.1:8080;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_connect_timeout 5;
}

跨域相关的配置&＃xff0c;主要是下面这部分&＃xff1a;

add_header &＃39;Access-Control-Allow-Origin&＃39; $http_origin;
add_header &＃39;Access-Control-Allow-Credentials&＃39; &＃39;true&＃39;;
add_header &＃39;Access-Control-Allow-Methods&＃39; &＃39;GET, POST, OPTIONS&＃39;;
add_header &＃39;Access-Control-Allow-Headers&＃39; &＃39;DNT,web-token,app-token,Authorization,Accept,Origin,Keep-Alive,User-Agent,X-Mx-ReqToken,X-Data-Type,X-Auth-Token,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range&＃39;;
add_header &＃39;Access-Control-Expose-Headers&＃39; &＃39;Content-Length,Content-Range&＃39;;
if ($request_method &＃61; &＃39;OPTIONS&＃39;) {
add_header &＃39;Access-Control-Max-Age&＃39; 1728000;
add_header &＃39;Content-Type&＃39; &＃39;text/plain; charset&＃61;utf-8&＃39;;
add_header &＃39;Content-Length&＃39; 0;
return 204;
}

下面简单讲解一下&＃xff0c;以便大家配置成功&＃xff01;

1、Access-Control-Allow-Origin&＃xff0c;这里使用变量 $http_origin取得当前来源域&＃xff0c;大家说用“*”代表允许所有&＃xff0c;我实际使用并不成功&＃xff0c;原因未知&＃xff1b;

2、Access-Control-Allow-Credentials&＃xff0c;为 true 的时候指请求时可带上COOKIE&＃xff0c;自己按情况配置吧&＃xff1b;

3、Access-Control-Allow-Methods&＃xff0c;OPTIONS一定要有的&＃xff0c;另外一般也就GET和POST&＃xff0c;如果你有其它的也可加进去&＃xff1b;

4、Access-Control-Allow-Headers&＃xff0c;这个要注意&＃xff0c;里面一定要包含自定义的http头字段&＃xff08;就是说前端请求接口时&＃xff0c;如果在http头里加了自定义的字段&＃xff0c;这里配置一定要写上相应的字段&＃xff09;&＃xff0c;从上面可看到我写的比较长&＃xff0c;我在网上搜索一些常用的写进去了&＃xff0c;里面有“web-token”和“app-token”&＃xff0c;这个是我项目里前端请求时设置的&＃xff0c;所以我在这里要写上&＃xff1b;

5、Access-Control-Expose-Headers&＃xff0c;可不设置&＃xff0c;看网上大致意思是默认只能获返回头的6个基本字段&＃xff0c;要获取其它额外的&＃xff0c;先在这设置才能获取它&＃xff1b;

6、语句“ if ($request_method &＃61; &＃39;OPTIONS&＃39;) { ”&＃xff0c;因为浏览器判断是否允许跨域时会先往后端发一个 options 请求&＃xff0c;然后根据返回的结果判断是否允许跨域请求&＃xff0c;所以这里单独判断这个请求&＃xff0c;然后直接返回&＃xff1b;

好了&＃xff0c;按我上面配置基本都可使用&＃xff08;有些朋友确定只百度复制了两行&＃xff0c;然后说配置好了&＃xff0c;跟前端朋友互扯&＃xff09;&＃xff0c;

下面发一个实际配置供参考&＃xff0c;我做了少量更改&＃xff0c;如下&＃xff1a;

server {
listen 80;
server_name xxx.com;location /xxx-web/papi {
add_header &＃39;Access-Control-Allow-Origin&＃39; $http_origin;
add_header &＃39;Access-Control-Allow-Credentials&＃39; &＃39;true&＃39;;
add_header &＃39;Access-Control-Allow-Methods&＃39; &＃39;GET, POST, OPTIONS&＃39;;
add_header &＃39;Access-Control-Allow-Headers&＃39; &＃39;DNT,web-token,app-token,Authorization,Accept,Origin,Keep-Alive,User-Agent,X-Mx-ReqToken,X-Data-Type,X-Auth-Token,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range&＃39;;
add_header &＃39;Access-Control-Expose-Headers&＃39; &＃39;Content-Length,Content-Range&＃39;;
if ($request_method &＃61; &＃39;OPTIONS&＃39;) {
add_header &＃39;Access-Control-Max-Age&＃39; 1728000;
add_header &＃39;Content-Type&＃39; &＃39;text/plain; charset&＃61;utf-8&＃39;;
add_header &＃39;Content-Length&＃39; 0;
return 204;
}
root html;
index index.html index.htm;
proxy_pass http://127.0.0.1:7071;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_connect_timeout 5;
}location /xxx-web {
add_header &＃39;Access-Control-Allow-Origin&＃39; $http_origin;
add_header &＃39;Access-Control-Allow-Credentials&＃39; &＃39;true&＃39;;
add_header &＃39;Access-Control-Allow-Methods&＃39; &＃39;GET, POST, OPTIONS&＃39;;
add_header &＃39;Access-Control-Allow-Headers&＃39; &＃39;DNT,web-token,app-token,Authorization,Accept,Origin,Keep-Alive,User-Agent,X-Mx-ReqToken,X-Data-Type,X-Auth-Token,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range&＃39;;
add_header &＃39;Access-Control-Expose-Headers&＃39; &＃39;Content-Length,Content-Range&＃39;;
if ($request_method &＃61; &＃39;OPTIONS&＃39;) {
add_header &＃39;Access-Control-Max-Age&＃39; 1728000;
add_header &＃39;Content-Type&＃39; &＃39;text/plain; charset&＃61;utf-8&＃39;;
add_header &＃39;Content-Length&＃39; 0;
return 204;
}
root html;
index index.html index.htm;
proxy_pass http://127.0.0.1:8080;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_connect_timeout 5;
}location / {
root /var/www/xxx/wechat/webroot;
index index.html index.htm;
}error_page 500 502 503 504 /50x.html;
location &＃61; /50x.html {
root html;
}
}

原文来自&＃xff1a;https://www.linuxprobe.com/nginx-cors-reuwest.html