平安云 - 云以致用智造未来

预检请求实现

平安云API网关默认不支持跨域访问CORS功能，如要需要支持跨域访问CORS，请先在<a href="https://pinganyun.com/console/apiGateway" target="_blank">API网关管理控制台</a>开启CORS并重新发布API，同时按照<a href="https://pinganyun.com/ssr/help/middleware/APIGateway/Common_Reference.CORS.Principle" target="_blank">预检请求原理</a>的描述创建预检API。 1.  浏览器发送携带Origin的API请求： <table border="0" cellpadding="0" cellspacing="0"> <tbody> <tr> <td style="background-color:#f7f8fa"> OPTIONS / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.170 Safari/537.36 Host: pinganyun.com Accept: */* Origin: http://www.Server-test.com Access-Control-Request-Method: PUT Access-Control-Request-Headers: PA-AG-AppId, PA-AG-Timestamp </td> </tr> </tbody> </table> •   Origin：请求的来源。 •   Access-Control-Request-Method：浏览器实际的请求方法。 •   Access-Control-Request-Headers：实际请求中额外携带的请求头信息。 2.  后端服务器是否允许发送跨域请求的响应信息： <table border="0" cellpadding="0" cellspacing="0"> <tbody> <tr> <td style="background-color:#f7f8fa"> HTTP/1.1 200 OK Date: Tue, 21 Jan 2019 21:15:13 GMT Content-Type: application/json Access-Control-Allow-Origin: http://www.Server-test.com Access-Control-Allow-Headers: PUT Access-Control-Allow-Methods: PA-AG-AppId, PA-AG-Timestamp </td> </tr> </tbody> </table> •   Access-Control-Allow-Origin：允许跨域访问的源。取值为*，表示后端服务器接受任意域的请求。 •   Access-Control-Allow-Methods：允许浏览器使用的请求方法。 •   Access-Control-Allow-Headers：允许浏览器在请求中携带的请求头。 3.  API网关是否允许发送跨域请求的响应信息： <table border="0" cellpadding="0" cellspacing="0"> <tbody> <tr> <td style="background-color:#f7f8fa"> HTTP/1.1 200 OK Date: Tue, 21 Jan 2019 21:15:13 GMT Content-Type: application/json Access-Control-Allow-Origin: http://www.Server-test.com Access-Control-Allow-Headers: PUT Access-Control-Allow-Methods: PA-AG-AppId, PA-AG-Timestamp Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers Access-Control-Allow-Origin: http://www.Server-test.com Access-Control-Max-Age: 1800 </td> </tr> </tbody> </table> •   Access-Control-Allow-Origin：允许跨域访问的源。取值为*，表示后端服务器接受任意域的请求。 •   Access-Control-Allow-Methods：允许浏览器使用的请求方法。 •   Access-Control-Allow-Headers：允许浏览器在请求中携带的请求头。 •   Access-Control-Max-Age：预检响应的有效时间，单位：秒。在有效期内，浏览器无需再次发送预检请求。     <img src="https://pcp-portal-sca.obs-cn-shenzhen.pinganyun.com/pcp-portal-sca/20193110110322-168dbed595ee.png" style="height:26px; margin:0px; width:65px" />：如果后端服务器返回的结果中没有以上4个字段，或仅包含其中的几个字段，API网关会补齐剩余字段后返回给浏览器。 4.  浏览器发送携带Origin的API请求： <table border="0" cellpadding="0" cellspacing="0"> <tbody> <tr> <td style="background-color:#f7f8fa"> PUT /putUser HTTP/1.1 Host: pinganyun.com Orgin: http://www.Server-test.com Content-type: application/x-www-form-urlencoded; charset=utf-8 Accept: application/json; charset=utf-8 Date: Tue, 21 Jan 2019 21:15:13 GMT </td> </tr> </tbody> </table> 5.  后端服务器返回的响应信息： <table border="0" cellpadding="0" cellspacing="0"> <tbody> <tr> <td style="background-color:#f7f8fa"> HTTP/1.1 200 OK Date: Tue, 21 Jan 2019 21:15:13 GMT Content-Type: application/json Content-Length: 25 Access-Control-Allow-Origin: http://www.Server-test.com   {"ret":"0", "msg":"succ"} </td> </tr> </tbody> </table> 6.  API网关发送给浏览器的响应信息： <table border="0" cellpadding="0" cellspacing="0"> <tbody> <tr> <td style="background-color:#f7f8fa"> HTTP/1.1 200 OK Date: Tue, 21 Jan 2019 21:15:13 GMT Content-Type: application/json Access-Control-Allow-Origin: http://www.Server-test.com Access-Control-Allow-Headers: PUT Access-Control-Allow-Methods: PA-AG-AppId, PA-AG-Timestamp Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers Access-Control-Allow-Origin: http://www.Server-test.com Access-Control-Max-Age: 1800 Content-Length: 25   {"ret":"0", "msg":"succ"} </td> </tr> </tbody> </table>

以上内容是否解决了您的问题？是否