获取 request.getHeader( "Authorization" ) 为空，同时从浏览器点击 api，但不在邮递员中

Question

这是我用java编写的过滤器，它将拦截所有传入的http请求。

当我试图获取或打印request.getHeader("Authorization")时，它会给我null，但如果我从邮递员那里收到相同的请求，我就会得到它的值。

package com.web.filter;
import java.io.IOException;
import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import org.springframework.core.Ordered;
import org.springframework.core.annotation.Order;
import org.springframework.stereotype.Component;
@Component
@Order(Ordered.HIGHEST_PRECEDENCE)
public class CORSFilter implements Filter{

@Override
public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain) throws 
IOException, ServletException {
HttpServletResponse response = (HttpServletResponse) res;
HttpServletRequest request = (HttpServletRequest) req;
String header=request.getHeader("Authorization");

response.setHeader("Access-Control-Allow-Origin", "*");
response.setHeader("Access-Control-Allow-Methods", "*");
response.setHeader("Access-Control-Max-Age", "3600");
response.setHeader("Access-Control-Allow-Headers", "*");
if ("OPTIONS".equalsIgnoreCase(request.getMethod())) {              
response.setStatus(HttpServletResponse.SC_OK);
} else {
chain.doFilter(req, res);
}
}
@Override
public void init(FilterConfig filterConfig) {
}
@Override
public void destroy() {
}
}

Answer 1

我猜在浏览器中您的请求可能不是cors(跨服务器)。案例前端和后端运行在同一个域- localhost。当您使用邮差时，您的请求是跨域的。