记录一下Nginx跨域处理

2021 年 12 月 25 日

1119 次浏览

1346字数

在站点的配置文件中加入<pre><code>location / {
 add_header Access-Control-Allow-Origin *;
 add_header Access-Control-Allow-Methods GET,POST,OPTIONS;
 add_header Access-Control-Allow-Credentials true;
 add_header Access-Control-Allow-Headers DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type;
 add_header Access-Control-Max-Age 1728000;
}
</code></pre>即可解决跨域，缺点是所有域名都可以请求使用下面的代码即可配置允许的域名请求<pre><code>location / {
 # 检查域名后缀
 if ($http_origin ~ \.test\.com) {
 add_header Access-Control-Allow-Origin $http_origin;
 add_header Access-Control-Allow-Methods GET,POST,OPTIONS;
 add_header Access-Control-Allow-Credentials true;
 add_header Access-Control-Allow-Headers DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type;
 add_header Access-Control-Max-Age 1728000;
 }

if ($request_method = OPTIONS) {
 add_header Access-Control-Allow-Origin $http_origin;
 add_header Access-Control-Allow-Methods GET,POST,OPTIONS;
 add_header Access-Control-Allow-Credentials true;
 add_header Access-Control-Allow-Headers DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type;
 add_header Access-Control-Max-Age 1728000;
 return 204;
 }
}</code></pre>