Webflux 跨域设置及与权限冲突的解决办法

/**
 * 跨域Filter
 */
@Configuration
@Data
public class CorsFilter implements WebFluxConfigurer {

    @Value("#{‘${cors.allowedOrigins:*}‘.split(‘,‘)}")
    private List<String> allowedOrigins;
    @Value("#{‘${cors.allowedHeaders:*}‘.split(‘,‘)}")
    private List<String> allowedHeaders;
    @Value("#{‘${cors.allowedMethods:*}‘.split(‘,‘)}")
    private List<String> allowedMethods;
    @Value("${cors.corsMapping:/**}")
    private String corsMapping;

    /**
     * corsWebFilter需要早于AuthFiler
     */
    @Bean
    @Order(-200) //非常重要，一定要早于AuthFilter
    CorsWebFilter corsWebFilter() {
        CorsConfiguration config = new CorsConfiguration();
        config.setAllowCredentials(true);
        for(String val:allowedOrigins){
            config.addAllowedOrigin(val);
        }
        for(String val:allowedHeaders){
            config.addAllowedHeader(val);
        }
        for(String val:allowedMethods){
            config.addAllowedMethod(val);
        }
        UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
        source.registerCorsConfiguration(corsMapping, config);
        return new CorsWebFilter(source);
    }
}