JSP 中的 JSON 网络服务出现跨域错误？

Question

大家好，我是 JSP 的新手，我正在使用 Jersey 库 1.19 bundle.This 创建 JSON 网络服务，网络服务在 Android 和 [=48= 中运行良好] 但是当通过 Ajax 调用时，它会显示跨域错误之类的错误。

Web.xml

<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns="http://java.sun.com/xml/ns/javaee"
    xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"
    id="WebApp_ID" version="2.5">
    <display-name>Sales Report</display-name>
    <welcome-file-list>
        <welcome-file>index.html</welcome-file>
        <welcome-file>index.jsp</welcome-file>
    </welcome-file-list>
    <servlet>
        <servlet-name>ServletAdaptor</servlet-name>
        <servlet-class>com.sun.jersey.spi.container.servlet.ServletContainer</servlet-class>

        <init-param>
            <param-name>com.sun.jersey.config.property.packages</param-name>
            <param-value>model</param-value>
        </init-param>
        <load-on-startup>1</load-on-startup>
    </servlet>
    <servlet-mapping>
        <servlet-name>ServletAdaptor</servlet-name>
        <url-pattern>/report/*</url-pattern>
    </servlet-mapping>
</web-app>

网络服务class

@GET
@Path("/sales_order_details")
@Produces("application/json")
public String order_details(){
    String feeds  = null;
    try 
    {
        ArrayList<Order_headers> whole_data = null;

        Project projectManager= new Project();
        whole_data = projectManager.order_details();
        feeds=Arraylist_to_json.Order_edtails(whole_data);

    } catch (Exception e){
        e.printStackTrace();
    }
    return feeds;
}

在 Google 中搜索后，我得到了一个解决方案来添加 ContainerResponseFilter，但现在也遇到了同样的错误。

跨域过滤器class

public class CrossDomainFilter implements ContainerResponseFilter {

    @Override
    public ContainerResponse filter(ContainerRequest req,ContainerResponse contResp) {
        // TODO Auto-generated method stub

        ResponseBuilder resp = Response.fromResponse(contResp.getResponse());
        resp.header("Access-Control-Allow-Origin", "*").header("Access-Control-Allow-Methods", "GET, POST, OPTIONS");

        String reqHead = req.getHeaderValue("Access-Control-Request-Headers");

        if (null != reqHead && !reqHead.equals("")) {
            resp.header("Access-Control-Allow-Headers", reqHead);
        }

        contResp.setResponse(resp.build());
        return contResp;
    }
}

我在 web.xml 中添加了另一个 <init-param>

<init-param>
    <param-name>com.sun.jersey.spi.container.ContainerResponseFilters</param-name>
    <param-value>cros.filter.CrossDomainFilter</param-value>
</init-param>

Ajax 通话

$(function() {
    $.ajax({
        type:'GET',
        dataType:'jsonp',
        jsonp:'jsonp',
        url:'http://192.168.1.2:8080/Sales_report/report/customer_details',
        success:function(data) {
            $.each(data["customer_details"], function(index, item) {
                var $tag = item.city;
                var $count = item.customer_id;
                $("body").append('<div class="Whosebug"> The Tag <span class="q-tag">' + $tag + '</span> has <span class="q-count">' + $count + '</span> Questions.</div>')
            });
        },
        error:function() {
            alert("Sorry, I can't get the feed");
        }
    });
});

有谁知道可以帮我解决这个问题。

Answer 1

您必须在服务器端响应中添加 headers 个 Access-control-allow-origin 个。

response.header("Access-Control-Allow-Origin", "*")
response.header("Access-Control-Allow-Methods", "GET, POST, DELETE, PUT")

Answer 2

使用 cors-filter jar http://grepcode.com/snapshot/repo1.maven.org/maven2/com.thetransactioncompany/cors-filter/1.3.2

在您的 web.xml 文件（网络应用程序）中使用过滤器

<filter>
<filter-name>CORS</filter-name>
<filter-class>com.thetransactioncompany.cors.CORSFilter</filter-class>
<init-param>
    <param-name>cors.allowGenericHttpRequests</param-name>
    <param-value>true</param-value>
</init-param>
<init-param>
    <param-name>cors.allowOrigin</param-name>
    <param-value>*</param-value>
</init-param>
<init-param>
    <param-name>cors.allowSubdomains</param-name>
    <param-value>true</param-value>
</init-param>
<init-param>
    <param-name>cors.supportedMethods</param-name>
    <param-value>GET, HEAD, POST, OPTIONS</param-value>
</init-param>
<init-param>
    <param-name>cors.supportedHeaders</param-name>
    <param-value>Content-Type, X-Requested-With</param-value>
</init-param>
<init-param>
    <param-name>cors.exposedHeaders</param-name>
    <param-value>X-Test-1, X-Test-2</param-value>
</init-param>
<init-param>
    <param-name>cors.supportsCredentials</param-name>
    <param-value>true</param-value>
</init-param>
<init-param>
    <param-name>cors.maxAge</param-name>
    <param-value>-1</param-value>
</init-param>
</filter>


<filter-mapping>
<filter-name>CORS</filter-name>
 <url-pattern>/EmployeeResource</url-pattern>
</filter-mapping>

Answer 3

我想念 CrossDomainFilter class 中的 @Provider 注释，就像下面我提到的

@Provider
public class CrossDomainFilter implements ContainerResponseFilter {

@Override
public ContainerResponse filter(ContainerRequest req,ContainerResponse contResp) {
    // TODO Auto-generated method stub

    ResponseBuilder resp = Response.fromResponse(contResp.getResponse());
    resp.header("Access-Control-Allow-Origin", "*").header("Access-Control-Allow-Methods", "GET, POST, OPTIONS");

    String reqHead = req.getHeaderValue("Access-Control-Request-Headers");

    if (null != reqHead && !reqHead.equals("")) {
        resp.header("Access-Control-Allow-Headers", reqHead);
    }

    contResp.setResponse(resp.build());
    return contResp;
}
}

之后它在 Ajax 调用中没有跨域错误的情况下工作正常。

JSP 中的 JSON 网络服务出现跨域错误？

Cross Domain Error in JSON webservice in JSP?

java

json

jsp

jersey

cors