CORS 响应过滤器未调用 Resteasy / JAX-RS 2.0

Question

我正在尝试实施 CORS 响应文件管理器以允许从我的 JavaScript 前端进行跨域引用。我正在使用 Resteasy 附带的 Wildfly 10.0.final，如果我理解正确的话，它是 JAX-RS 2.0 赞美。

编辑：将@Provider 添加到 CorsResponseFilter，并作为 RestServiceConfig 的单例。

我需要做什么才能调用我的 CorsResponseFilter？

PS。看了这些帖子，对解决问题没有帮助。

ContainerRequestFilter ContainerResponseFilter dosent get called

ResourceConfig and Application

CorsResponseFilter.java

@Provider
public class CorsResponseFilter implements ContainerResponseFilter {

@Override
public void filter(ContainerRequestContext requestContext, ContainerResponseContext responseContext) throws IOException {

    MultivaluedMap<String, Object> headers = responseContext.getHeaders();
    headers.add("Access-Control-Allow-Origin", "*");
    //headers.add("Access-Control-Allow-Origin", "http://podcastpedia.org"); //allows CORS requests only coming from podcastpedia.org       
    headers.add("Access-Control-Allow-Methods", "GET, POST, DELETE, PUT");
    headers.add("Access-Control-Allow-Headers", "X-Requested-With, Content-Type, X-Codingpedia");        
    headers.add("Access-Control-Max-Age", "1209600");
}

}

RestServiceConfig.java

public class RestServiceConfig extends Application {

    private final Set<Object> singletons = new HashSet<>();

    public RestServiceConfig() {
        singletons.add(new CorsResponseFilter());  
        singletons.add(new ApplicationService());
        singletons.add(new TweetObsService());
    }

    @Override
    public Set<Object> getSingletons() {
        return singletons;
    }
}

web.xml

...
<listener>
    <listener-class>
        org.jboss.resteasy.plugins.server.servlet.ResteasyBootstrap
    </listener-class>
</listener>

<servlet>
    <servlet-name>resteasy-servlet</servlet-name>
    <servlet-class>
        org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher
    </servlet-class>
    <init-param>
        <param-name>javax.ws.rs.Application</param-name>
        <param-value>org.mycorp.myapp.service.RestServiceConfig</param-value>
    </init-param>
    <init-param>
        <param-name>com.sun.jersey.spi.container.ContainerResponseFilters</param-name>
        <param-value>org.clearbyte.obs.service.CorsResponseFilter</param-value>
    </init-param>
</servlet>
<servlet-mapping>
    <servlet-name>resteasy-servlet</servlet-name>
    <url-pattern>/service/*</url-pattern>
</servlet-mapping>
<context-param>
    <param-name>resteasy.servlet.mapping.prefix</param-name>
    <param-value>/service</param-value>
</context-param>

...

Wildfly 日志控制台

13:56:01,672 INFO  [org.jboss.resteasy.resteasy_jaxrs.i18n] RESTEASY002225: Deploying javax.ws.rs.core.Application: class org.clearbyte.obs.service.RestServiceConfig
13:56:01,672 INFO  [org.jboss.resteasy.resteasy_jaxrs.i18n] RESTEASY002200: Adding class resource org.clearbyte.obs.service.TweetObsService from Application class org.clearbyte.obs.service.RestServiceConfig
13:56:01,672 INFO  [org.jboss.resteasy.resteasy_jaxrs.i18n] RESTEASY002200: Adding class resource org.clearbyte.obs.service.ApplicationService from Application class org.clearbyte.obs.service.RestServiceConfig

Answer 1

我会尝试将其声明为标准过滤器，而不是 servlet 调度程序的参数：

<filter>
    <filter-name>CorsHeadersFilter</filter-name> 
    <filter-class>org.clearbyte.obs.service.CorsResponseFilter</filter-class> 
</filter> 
<filter-mapping> 
    <filter-name>CorsHeadersFilter</filter-name> 
    <url-pattern>/service/*</url-pattern> 
</filter-mapping>

Answer 2

一些浏览器（即：Chrome）在发出请求之前发送一个 OPTION 请求。由于您明确指定 'GET' 'PUT' 'POST' 'DELETE'，因此 'OPTION' 调用不会获取 headers 信息 :)

将 OPTION 添加到您的列表应该可以解决问题

Answer 3

所以我从头开始了一个新项目来消除错误源。感谢您提供有关使用 @Provider 和添加 OPTIONS 的意见。另外，我从 web.xml.

中删除了所有配置 REST

@Provider 是过滤器工作所必需的

ServiceCorsFilter.java

@Provider
public class ServiceCorsFilter implements ContainerResponseFilter {

    @Override
    public void filter(ContainerRequestContext requestContext, ContainerResponseContext responseContext) throws IOException {
        responseContext.getHeaders().putSingle("Access-Control-Allow-Origin", "*");
        responseContext.getHeaders().putSingle("Access-Control-Allow-Methods", "OPTIONS, GET, POST, PUT, DELETE");
        responseContext.getHeaders().putSingle("Access-Control-Allow-Headers", "Content-Type");                       
    }    
}

@ApplicationPath 使 web.xml 配置过时

ServiceConfig.java

    @ApplicationPath("service")
public class ServiceConfig extends Application {

    private Set<Object> singletons = new HashSet<>();

    public ServiceConfig() {
        singletons.add(new UserServiceV1());
        singletons.add(new ServiceCorsFilter());
    }

    @Override
    public Set<Object> getSingletons() {
        return singletons;
    }

}

这是web.xml

中剩下的

<web-app xmlns="http://xmlns.jcp.org/xml/ns/javaee"
         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee http://xmlns.jcp.org/xml/ns/javaee/web-app_3_1.xsd"
         version="3.1">
    <session-config>
        <session-timeout>
            30
        </session-timeout>
    </session-config>
    <display-name>MyApp</display-name>
    <!-- No REST related config due the the @Provider and inheritance of Application-->
</web-app>

CORS 响应过滤器未调用 Resteasy / JAX-RS 2.0

CORS Response Filter not invoked Resteasy / JAX-RS 2.0

jax-rs

filter

resteasy

cors