在跨域请求中
ajax中,设置了
xhrFields: { withCredentials: true} ,相应的应在后台也应该设置
ajax:
$.ajax({ type: 'post', xhrFields: { withCredentials: true }, url: "http://localhost:8060/authentication/form", data: { 'username': username, 'password': password, 'imageCode':imageCode }, dataType: "text" }).success(function (data) { alert("登陆成功"); /*将返回信息同时存入sessionStorage,cookie*/ sessionStorage.setItem('token', JSON.stringify(data)); document.cookie = "info="+JSON.stringify(data); //window.location.href="index.html" }).error(function () { alert("账号密码不正确"); });
java
response.setCharacterEncoding("UTF-8"); response.setContentType("application/json;charset=utf-8"); response.setHeader("Access-Control-Allow-Credentials","true"); response.setHeader("Access-Control-Allow-Origin", "http://admin.wenfan.com"); //允许跨域请求 response.setHeader("Access-Control-Allow-Methods","PUT,POST,GET,DELETE,OPTIONS"); response.setHeader("Access-Control-Allow-Headers","Authorization");