zouxuan 1 year ago
parent
commit
fc9e347565

+ 4 - 1
mec-gateway/mec-gateway-web/src/main/java/com/ym/mec/gateway/web/filter/AuthFilter.java

@@ -25,7 +25,10 @@ public class AuthFilter extends ZuulFilter {
 		RequestContext requestContext = RequestContext.getCurrentContext();
 		requestContext.getZuulRequestHeaders().put("HTTP_X_FORWARDED_FOR", getRealIp(requestContext.getRequest()));
 		HttpServletResponse response = requestContext.getResponse();
-		response.setHeader("Access-Control-Allow-Origin", "https://*.lexiaoya.cn");
+		String origin = requestContext.getRequest().getHeader("Origin");
+		if (origin != null && origin.endsWith(".lexiaoya.cn")) {
+			response.setHeader("Access-Control-Allow-Origin", origin);
+		}
 		response.setHeader("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE, OPTIONS");
 		response.setHeader("Access-Control-Allow-Headers", "Content-Type, Authorization");
 		response.setHeader("Access-Control-Allow-Credentials", "true");