始终在预检响应中Access-Control-Allow-Methods不允许方法DELETE [英] Always got Method DELETE is not allowed by Access-Control-Allow-Methods in preflight response

问题描述

我使用jersey作为我的restful api实现。在前端，我使用angularjs $ http服务来进行http请求。当我请求一个删除方法我总是得到以下错误。

I am using jersey as my restful api implementation. In the front end, I am using angularjs $http service to make http request. When I request a delete method I always got below error.

"Method DELETE is not allowed by Access-Control-Allow-Methods in preflight response."  

我读了一些文章，他们说我需要允许删除访问控制允许方法。我已经设置响应过滤器如下，但它仍然有这样的问题。我还应该做什么？

I read some articles and they say I need to allow delete on "Access-Control-Allow-Methods". I have setup the response filter as below but it still has such problem. What else should I do?

@Provider
public class CORSResponseFilter implements ContainerResponseFilter {

    @Override
    public void filter(ContainerRequestContext requestContext, ContainerResponseContext responseContext) throws IOException {
        MultivaluedMap<String, Object> headers = responseContext.getHeaders();

        headers.add("Access-Control-Allow-Origin", "*");
        headers.add("Access-Control-Allow-Methods", "*");
    }
}

是我的角度代码， / p>

below is my angular code to make the request:

$http({
            method: 'DELETE',
            url: remoteUrl,
            headers : {'Content-Type': 'application/x-www-form-urlencoded;charset=utf-8',
                'ACCESS_TOKEN' : $cookieStore.get("access_token")
            },
            data : $httpParamSerializer({
                'id':id
            })
        }).success(function(data,status,headers,config) {
            $scope.refreshDepartments();
            console.log(data);
            alert("success");
        }).error(function(data,status,headers,config){
            console.log(data);
            alert("error");
        });

推荐答案

经过一些测试，我把allow方法的标题如下，然后它的工作原理。我不知道为什么*不起作用。

After some testing, I found the solution. I put the allow method on the header as below, then it works. I don't know why "*" doesn't work.

headers.add("Access-Control-Allow-Methods", "GET, POST, OPTIONS, PUT, DELETE");

这篇关于始终在预检响应中Access-Control-Allow-Methods不允许方法DELETE的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！