CORS反应和杜松子酒杜松子酒

Question

我已经遇到了一个问题，该问题在开发环境中，反应前端和go-lang gin-gin-gon-gonic框架之间实现了越野资源共享，下面是浏览器的控制台日志

邮政请求

console log from react react应用程序发送 可以看出，从GO框架收到的请求未验证

我尝试了两个黑客，一个正在验证前飞行请求，并通过React选项获得200，如下所示，

func preflight(c *gin.Context) {
    c.Header("Access-Control-Allow-Origin", "*")
    c.Header("Access-Control-Allow-Headers", "access-control-allow-origin, access-control-allow-headers")
    c.JSON(http.StatusOK, struct{}{})
}

此hack没有帮助，此外，我在访问控件中包括一个带有通配符域的中间件允许来源，以及http：// localhost：3000：如下所示，

func CORSMiddleware() gin.HandlerFunc {
    return func(c *gin.Context) {

        c.Header("Access-Control-Allow-Origin", "*")
        c.Header("Access-Control-Allow-Credentials", "true")
        c.Header("Access-Control-Allow-Headers", "Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With")
        c.Header("Access-Control-Allow-Methods", "POST,HEAD,PATCH, OPTIONS, GET, PUT")

        if c.Request.Method == "OPTIONS" {
            c.AbortWithStatus(204)
            return
        }

        c.Next()
    }
}

我还尝试了GIN CORS软件包，如下所示，如下所示该请求仍被阻止

These are part of my routes 

    r := gin.Default()
    //r := gin.New()

    config := cors.DefaultConfig()
    config.AllowOrigins = []string{"*"}
    // config.AllowOrigins = []string{"http://google.com", "http://facebook.com"}
    // config.AllowAllOrigins = true
    r.Use(cors.New(config))

    //system routes
    router.NotFound(r)
    router.NoMethods(r)

    //static routes
    router.ServeStatic(r)
Methods 

func NotFound(route *gin.Engine) {
    route.NoRoute(func(c *gin.Context) {
        c.JSON(404, gin.H{"msg": "Not Found"})
    })
}

func NoMethods(route *gin.Engine) {
    route.NoMethod(func(c *gin.Context) {
        c.JSON(405, gin.H{"msg": "Not allowed"})
    })
}

//Serve frontend static files

func ServeStatic(route *gin.Engine) {
    route.Use(static.Serve("/", static.LocalFile("./views/public", true)))
    route.Use(auth.CORSMiddleware())
    api := route.Group("/api")

    {
        api.GET("/", func(c *gin.Context) {
            c.JSON(http.StatusOK, gin.H{
                "message": "pong",
            })
        })
    }

GO版本是GO版本GO1.18.1 Linux/AMD64

"axios": "^0.24.0",
"react": "^18.1.0",

Answer 1

尝试在句柄示例之前移动CORS中间件

：

func (h *Handler) InitRoutes() *gin.Engine {
    router := gin.New()

    router.Use(h.setHeaders)

    router.GET("/", h.getRecordsByFilter)
    router.GET("/:uuid", h.getRecordByUuid)
    router.POST("/", h.createRecord)
    router.PUT("/:uuid", h.updateRecord)
    router.DELETE("/:uuid", h.deleteRecord)

    return router
}

Answer 2

问题在于，凭据是前端的真实条件

handleSubmit(event) {
    const {email,password} = this.state;
    axios.post("http://localhost:3000/auth/register",
    {email: email, password: password},{
        withCredentials: true}).then(response => {
            console.log("registration res", response);
            console.log("response data",response.data);
        }).catch(error => {
            console.log("registratino error", error);
        });


    event.preventDefault();
}