失效代碼：

package com.yukuanyan.searcher_web.config;import org.springframework.context.annotation.Configuration;
import org.springframework.web.servlet.config.annotation.CorsRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;@Configuration
public class WebConfig implements WebMvcConfigurer {@Overridepublic void addCorsMappings(CorsRegistry registry) {registry.addMapping("/**").allowedOrigins("*").allowedMethods("GET", "POST", "PUT", "DELETE").allowedHeaders("*").allowCredentials(true).maxAge(3600);}
}

失效原因：

allowCredentials(true)被設置成了ture，說明瀏覽器應該在請求時攜帶憑證（credential），如果使用*作為通配符會導致安全問題，所以會導致通配符

allowedOrigins("*")

失效

?解決方法：
將allowCredentials()設置為false

package com.yukuanyan.searcher_web.config;import org.springframework.context.annotation.Configuration;
import org.springframework.web.servlet.config.annotation.CorsRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;@Configuration
public class WebConfig implements WebMvcConfigurer {@Overridepublic void addCorsMappings(CorsRegistry registry) {registry.addMapping("/**").allowedOrigins("*").allowedMethods("GET", "POST", "PUT", "DELETE").allowedHeaders("*")// allowOrigins 使用通配符時需要設置為false.allowCredentials(false).maxAge(3600);}
}