|
@@ -25,7 +25,10 @@ public class AuthFilter extends ZuulFilter {
|
|
|
RequestContext requestContext = RequestContext.getCurrentContext();
|
|
|
requestContext.getZuulRequestHeaders().put("HTTP_X_FORWARDED_FOR", getRealIp(requestContext.getRequest()));
|
|
|
HttpServletResponse response = requestContext.getResponse();
|
|
|
- response.setHeader("Access-Control-Allow-Origin", "https://*.lexiaoya.cn");
|
|
|
+ String origin = requestContext.getRequest().getHeader("Origin");
|
|
|
+ if (origin != null && origin.endsWith(".lexiaoya.cn")) {
|
|
|
+ response.setHeader("Access-Control-Allow-Origin", origin);
|
|
|
+ }
|
|
|
response.setHeader("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE, OPTIONS");
|
|
|
response.setHeader("Access-Control-Allow-Headers", "Content-Type, Authorization");
|
|
|
response.setHeader("Access-Control-Allow-Credentials", "true");
|