因為在AngularJS上使用CORS和http身份驗證可能很棘手，所以我編輯了問題以分享一個經(jīng)驗教訓。首先，我要感謝igorzg。他的回答對我很有幫助。該場景如下：您想使用AngularJS $ http服務將POST請求發(fā)送到另一個域。獲取AngularJS和服務器設置時，需要注意一些棘手的事情。首先：在您的應用程序配置中，您必須允許跨域調(diào)用/** * Cors usage example. * @author Georgi Naumov * gonaumov@gmail.com for contacts and * suggestions. **/ app.config(function($httpProvider) { //Enable cross domain calls $httpProvider.defaults.useXDomain = true;});第二：必須在請求中指定withCredentials：true以及用戶名和密碼。 /** * Cors usage example. * @author Georgi Naumov * gonaumov@gmail.com for contacts and * suggestions. **/ $http({ url: 'url of remote service', method: "POST", data: JSON.stringify(requestData), withCredentials: true, headers: { 'Authorization': 'Basic bashe64usename:password' } });答案：服務器設置。您必須提供：/** * Cors usage example. * @author Georgi Naumov * gonaumov@gmail.com for contacts and * suggestions. **/ header("Access-Control-Allow-Credentials: true");header("Access-Control-Allow-Origin: http://url.com:8080");header("Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS");header("Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization");對于每個請求。收到OPTION時，您必須通過：/** * Cors usage example. * @author Georgi Naumov * gonaumov@gmail.com for contacts and * suggestions. **/ if($_SERVER['REQUEST_METHOD'] == 'OPTIONS') { header( "HTTP/1.1 200 OK" ); exit();}HTTP身份驗證以及之后的所有其他操作。這是在php中使用服務器端的完整示例。<?php/** * Cors usage example. * @author Georgi Naumov * gonaumov@gmail.com for contacts and * suggestions. **/ header("Access-Control-Allow-Credentials: true");header("Access-Control-Allow-Origin: http://url:8080");header("Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS");header("Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization");if($_SERVER['REQUEST_METHOD'] == 'OPTIONS') { header( "HTTP/1.1 200 OK" ); exit();}我的博客上有一篇有關(guān)此問題的文章，可以在這里看到。
2 回答
慕娘9325324
TA貢獻1783條經(jīng)驗 獲得超4個贊
不，您不必放置憑據(jù)，您必須在客戶端放置標頭，例如：
$http({
url: 'url of service',
method: "POST",
data: {test : name },
withCredentials: true,
headers: {
'Content-Type': 'application/json; charset=utf-8'
}
});
并且在服務器端，您必須在此放置標頭，這是nodejs的示例：
/**
* On all requests add headers
*/
app.all('*', function(req, res,next) {
/**
* Response settings
* @type {Object}
*/
var responseSettings = {
"AccessControlAllowOrigin": req.headers.origin,
"AccessControlAllowHeaders": "Content-Type,X-CSRF-Token, X-Requested-With, Accept, Accept-Version, Content-Length, Content-MD5, Date, X-Api-Version, X-File-Name",
"AccessControlAllowMethods": "POST, GET, PUT, DELETE, OPTIONS",
"AccessControlAllowCredentials": true
};
/**
* Headers
*/
res.header("Access-Control-Allow-Credentials", responseSettings.AccessControlAllowCredentials);
res.header("Access-Control-Allow-Origin", responseSettings.AccessControlAllowOrigin);
res.header("Access-Control-Allow-Headers", (req.headers['access-control-request-headers']) ? req.headers['access-control-request-headers'] : "x-requested-with");
res.header("Access-Control-Allow-Methods", (req.headers['access-control-request-method']) ? req.headers['access-control-request-method'] : responseSettings.AccessControlAllowMethods);
if ('OPTIONS' == req.method) {
res.send(200);
}
else {
next();
}
});
元芳怎么了
TA貢獻1798條經(jīng)驗 獲得超7個贊
為了發(fā)出CORS請求，必須將標頭添加到請求中，同時還要添加他需要檢查的標頭（在Apache中已啟用mode_header）。
在Ubuntu中啟用標頭：
sudo a2enmod headers
為了讓php服務器接受來自不同來源的請求，請使用：
Header set Access-Control-Allow-Origin *
Header set Access-Control-Allow-Methods "GET, POST, PUT, DELETE"
Header always set Access-Control-Allow-Headers "x-requested-with, Content-Type, origin, authorization, accept, client-security-token"
- 2 回答
- 0 關(guān)注
- 581 瀏覽
添加回答
舉報
0/150
提交
取消