org.springframework.web.filter

Class CorsFilter

java.lang.Object

org.springframework.web.filter.GenericFilterBean

org.springframework.web.filter.OncePerRequestFilter

org.springframework.web.filter.CorsFilter

All Implemented Interfaces:

Aware, BeanNameAware, DisposableBean, InitializingBean, EnvironmentAware, ServletContextAware

public class CorsFilter
extends OncePerRequestFilter

javax.servlet.Filter that handles CORS preflight requests and intercepts CORS simple and actual requests thanks to a CorsProcessor implementation (DefaultCorsProcessor by default) in order to add the relevant CORS response headers (like Access-Control-Allow-Origin) using the provided CorsConfigurationSource (for example a CorsConfigurationMapping instance.

This filter could be used in conjunction with DelegatingFilterProxy in order to help with its initialization.

Since:

4.2

Author:

Sebastien Deleuze

See Also:

CORS W3C recommendation

Field Summary

Fields

Modifier and Type	Field and Description
private CorsProcessor	processor
private CorsConfigurationSource	source

Fields inherited from class org.springframework.web.filter.OncePerRequestFilter

ALREADY_FILTERED_SUFFIX

Fields inherited from class org.springframework.web.filter.GenericFilterBean

logger

Constructor Summary

Constructors

Constructor and Description
CorsFilter(CorsConfigurationSource source) Constructor accepting a CorsConfigurationSource, this source will be used by the filter to find the CorsConfiguration to use for each incoming request.

Method Summary

Modifier and Type	Method and Description
protected void	doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) Same contract as for doFilter, but guaranteed to be just invoked once per request within a single request thread.
void	setCorsProcessor(CorsProcessor processor) Configure a custom CorsProcessor to use to apply the matched CorsConfiguration for a request.

Methods inherited from class org.springframework.web.filter.OncePerRequestFilter

doFilter, getAlreadyFilteredAttributeName, isAsyncDispatch, isAsyncStarted, shouldNotFilter, shouldNotFilterAsyncDispatch, shouldNotFilterErrorDispatch

Methods inherited from class org.springframework.web.filter.GenericFilterBean

addRequiredProperty, afterPropertiesSet, destroy, getFilterConfig, getFilterName, getServletContext, init, initBeanWrapper, initFilterBean, setBeanName, setEnvironment, setServletContext

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

processor

private CorsProcessor processor

source

private final CorsConfigurationSource source

Constructor Detail

CorsFilter

public CorsFilter(CorsConfigurationSource source)

Constructor accepting a CorsConfigurationSource, this source will be used by the filter to find the CorsConfiguration to use for each incoming request.

See Also:

CorsConfigurationMapping

Method Detail

setCorsProcessor

public void setCorsProcessor(CorsProcessor processor)

Configure a custom CorsProcessor to use to apply the matched CorsConfiguration for a request.

By default DefaultCorsProcessor is used.

doFilterInternal

protected void doFilterInternal(HttpServletRequest request,
                                HttpServletResponse response,
                                FilterChain filterChain)
                         throws ServletException,
                                java.io.IOException

Description copied from class: OncePerRequestFilter

Same contract as for doFilter, but guaranteed to be just invoked once per request within a single request thread. See OncePerRequestFilter.shouldNotFilterAsyncDispatch() for details.

Provides HttpServletRequest and HttpServletResponse arguments instead of the default ServletRequest and ServletResponse ones.

Specified by:

doFilterInternal in class OncePerRequestFilter

Throws:

ServletException

java.io.IOException