angularjs和PHP:请求头字段Access-Control-Allow-Origin在预检响应中不允许使用Access-Control-Allow-Origin

Question

angularjs和PHP:请求头字段Access-Control-Allow-Origin在预检响应中不允许使用Access-Control-Allow-Origin

我正在尝试从angularjs到虚拟php文件进行简单的POST,以了解其工作原理.在我的angularjs部分:

<html ng-app="loginApp">
  <head>
    <meta charset="utf-8">
    <title>Login</title>
    <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.2/css/bootstrap.min.css">
      <script src="http://ajax.googleapis.com/ajax/libs/angularjs/1.2.26/angular.min.js"></script>
    <script>
      var logindata = {username:'abc', password:'abc'}
      var loginApp = angular.module('loginApp', []);
      loginApp.controller('loginCtrl', function ($scope, $http){        
        var request = $http({
            method: "POST",
            url: "http://different-ip/a.php",                    
            data: logindata,
            headers: { 'Content-Type': 'multipart/form-data', 'Authorization': 'Basic ' + btoa(logindata.username + logindata.password), 
            'Access-Control-Allow-Origin': "*"}
        });

        request.success(
            function( data ) {
                $scope.someVariableName = data;
            }
        );
    });
    </script>
  </head>
  <body ng-controller="loginCtrl">
    <h2>Angular.js JSON Fetching Example</h2>
    <p> {{ someVariableName }} </p>
  </body>
</html>

Run Code Online (Sandbox Code Playgroud)

这是我的PHP部分(a.php),它位于http:// different-ip

<?php
  header("Access-Control-Request-Method: *");
  header("Access-Control-Request-Headers: *");
  header("Access-Control-Allow-Origin: *");
  file_put_contents("aa.txt", json_decode(file_get_contents('php://input'),true));
  file_put_contents("aaa.txt", getallheaders());
?>

Run Code Online (Sandbox Code Playgroud)

当我执行我的angularjs文件时,chrome控制台给了我这个错误:

Request header field Access-Control-Allow-Origin is not allowed by Access-Control-Allow-Headers in preflight response.

Run Code Online (Sandbox Code Playgroud)

当我尝试使用Postman对这个a.php发帖时,一切正常.那么为什么angularjs不允许呢？我试过阅读有关CORS的内容,并没有直截了当的答案来解决这个问题(代码明智).有人可以帮帮我吗？提前致谢.

Answer 1

Pra*_*gde 7

将此代替当前标头添加到我的PHP文件中,现在它可以正常工作!谢谢@Armen的帮助!

    if (isset($_SERVER['HTTP_ORIGIN'])) {
        header("Access-Control-Allow-Origin: {$_SERVER['HTTP_ORIGIN']}");
        header('Access-Control-Allow-Credentials: true');
        header('Access-Control-Max-Age: 86400');    // cache for 1 day
    }

    // Access-Control headers are received during OPTIONS requests
    if ($_SERVER['REQUEST_METHOD'] == 'OPTIONS') {

        if (isset($_SERVER['HTTP_ACCESS_CONTROL_REQUEST_METHOD']))
            header("Access-Control-Allow-Methods: GET, POST, OPTIONS");         

        if (isset($_SERVER['HTTP_ACCESS_CONTROL_REQUEST_HEADERS']))
            header("Access-Control-Allow-Headers: {$_SERVER['HTTP_ACCESS_CONTROL_REQUEST_HEADERS']}");

        exit(0);
    }

Run Code Online (Sandbox Code Playgroud)

归档时间：	9 年，12 月前
查看次数：	3390 次
最近记录：	9 年，12 月前