使用nginx代理后CORS头消失

bwntbbo3  于 2024-01-06  发布在  Nginx
关注(0)|答案(1)|浏览(154)

我的小项目使用go作为后端，并利用gincors来设置cors头，并在docker中设置它

  1. r.Use(cors.New(cors.Config{
  2.         AllowAllOrigins:  true,
  3.         AllowMethods:     []string{"GET", "POST", "PUT", "DELETE", "OPTIONS", "HEAD"},
  4.         AllowHeaders:     []string{"Origin", "Content-Length", "Content-Type", "Authorization"},
  5.         AllowCredentials: true,
  6.         MaxAge:           12 * time.Hour,
  7.     }))

字符串
直接打开服务器端口，一切正常，前端正常接收相关的响应头。但是当我用nginx和代理/API请求部署前端到后端时，浏览器总是提示
从源“mywebsite”访问"mywebsite/API“处的XMLHttpRequest已被CORS策略阻止：请求的资源上不存在”MyWebsite-Control-Allow-Origin“标头。
我检查了响应头，所有与cors相关的头都没有了。当我使用用于绕过此限制的浏览器插件进行测试时，一切正常，表明代理成功。这是我的nginx配置，由工具生成

  1. # Generated by nginxconfig.io
  2. # See nginxconfig.txt for the configuration share link
  4. user nginx;
  5. pid /var/run/nginx.pid;
  6. worker_processes auto;
  7. worker_rlimit_nofile 65535;
  9. # Load modules
  10. include /etc/nginx/modules-enabled/*.conf;
  12. events {
  13.     multi_accept on;
  14.     worker_connections 65535;
  15. }
  17. http {
  18.     charset utf-8;
  19.     sendfile on;
  20.     tcp_nopush on;
  21.     tcp_nodelay on;
  22.     server_tokens off;
  23.     log_not_found off;
  24.     types_hash_max_size 2048;
  25.     types_hash_bucket_size 64;
  26.     client_max_body_size 16M;
  28.     # MIME
  29.     include mime.types;
  30.     default_type application/octet-stream;
  32.     # Logging
  33.     access_log off;
  34.     error_log /var/log/nginx/error.log warn;
  36.     # Limits
  37.     limit_req_log_level warn;
  38.     limit_req_zone $binary_remote_addr zone=login:10m rate=60r/m;
  40.     # SSL
  41.     ssl_session_timeout 1d;
  42.     ssl_session_cache shared:SSL:10m;
  43.     ssl_session_tickets off;
  45.     # Mozilla Modern configuration
  46.     ssl_protocols TLSv1.3;
  48.     # OCSP Stapling
  49.     ssl_stapling on;
  50.     ssl_stapling_verify on;
  51.     resolver 114.114.114.114 valid=60s;
  52.     resolver_timeout 2s;
  54.     # Connection header for WebSocket reverse proxy
  55.     map $http_upgrade $connection_upgrade {
  56.         default upgrade;
  57.         "" close;
  58.     }
  60.     map $remote_addr $proxy_forwarded_elem {
  62.         # IPv4 addresses can be sent as-is
  63.         ~^[0-9.]+$ "for=$remote_addr";
  65.         # IPv6 addresses need to be bracketed and quoted
  66.         ~^[0-9A-Fa-f:.]+$ "for=\"[$remote_addr]\"";
  68.         # Unix domain socket names cannot be represented in RFC 7239 syntax
  69.         default "for=unknown";
  70.     }
  72.     map $http_forwarded $proxy_add_forwarded {
  74.         # If the incoming Forwarded header is syntactically valid, append to it
  75.         "~^(,[ \\t]*)*([!#$%&'*+.^_`|~0-9A-Za-z-]+=([!#$%&'*+.^_`|~0-9A-Za-z-]+|\"([\\t \\x21\\x23-\\x5B\\x5D-\\x7E\\x80-\\xFF]|\\\\[\\t \\x21-\\x7E\\x80-\\xFF])*\"))?(;([!#$%&'*+.^_`|~0-9A-Za-z-]+=([!#$%&'*+.^_`|~0-9A-Za-z-]+|\"([\\t \\x21\\x23-\\x5B\\x5D-\\x7E\\x80-\\xFF]|\\\\[\\t \\x21-\\x7E\\x80-\\xFF])*\"))?)*([ \\t]*,([ \\t]*([!#$%&'*+.^_`|~0-9A-Za-z-]+=([!#$%&'*+.^_`|~0-9A-Za-z-]+|\"([\\t \\x21\\x23-\\x5B\\x5D-\\x7E\\x80-\\xFF]|\\\\[\\t \\x21-\\x7E\\x80-\\xFF])*\"))?(;([!#$%&'*+.^_`|~0-9A-Za-z-]+=([!#$%&'*+.^_`|~0-9A-Za-z-]+|\"([\\t \\x21\\x23-\\x5B\\x5D-\\x7E\\x80-\\xFF]|\\\\[\\t \\x21-\\x7E\\x80-\\xFF])*\"))?)*)?)*$" "$http_forwarded, $proxy_forwarded_elem";
  77.         # Otherwise, replace it
  78.         default "$proxy_forwarded_elem";
  79.     }
  81.     # Load configs
  82.     include /etc/nginx/conf.d/*.conf;
  84.     # mywebsite
  85.     server {
  86.         listen 443 ssl http2;
  87.         listen [::]:443 ssl http2;
  88.         server_name mywebsite;
  89.         root /var/www/mywebsite.site/public;
  91.         # SSL
  92.         ssl_certificate /etc/nginx/ssl/mywebsite.crt;
  93.         ssl_certificate_key /etc/nginx/ssl/mywebsite.key;
  95.         # security headers
  96.         add_header X-XSS-Protection "1; mode=block" always;
  97.         add_header X-Content-Type-Options "nosniff" always;
  98.         add_header Referrer-Policy "no-referrer-when-downgrade" always;
  99.         add_header Content-Security-Policy "default-src 'self' http: https: ws: wss: data: blob: 'unsafe-inline'; frame-ancestors 'self';" always;
  100.         add_header Permissions-Policy "interest-cohort=()" always;
  101.         add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
  103.         # . files
  104.         location ~ /\.(?!well-known) {
  105.             deny all;
  106.         }
  108.         # logging
  109.         error_log /var/log/nginx/error.log warn;
  111.         # reverse proxy
  112.         location /api/ {
  113.             proxy_pass http://172.17.0.2:8080;
  114.             proxy_set_header Host $host;
  115.             proxy_http_version 1.1;
  116.             proxy_cache_bypass $http_upgrade;
  118.             # Proxy SSL
  119.             proxy_ssl_server_name on;
  121.             # Proxy headers
  122.             proxy_set_header Upgrade $http_upgrade;
  123.             proxy_set_header Connection $connection_upgrade;
  124.             proxy_set_header X-Real-IP $remote_addr;
  125.             proxy_set_header Forwarded $proxy_add_forwarded;
  126.             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  127.             proxy_set_header X-Forwarded-Proto $scheme;
  128.             proxy_set_header X-Forwarded-Host $host;
  129.             proxy_set_header X-Forwarded-Port $server_port;
  131.             # Proxy timeouts
  132.             proxy_connect_timeout 60s;
  133.             proxy_send_timeout 60s;
  134.             proxy_read_timeout 60s;
  135.         }
  137.         # favicon.ico
  138.         location = /favicon.ico {
  139.             log_not_found off;
  140.         }
  142.         # robots.txt
  143.         location = /robots.txt {
  144.             log_not_found off;
  145.         }
  147.         # assets, media
  148.         location ~* \.(?:css(\.map)?|js(\.map)?|jpe?g|png|gif|ico|cur|heic|webp|tiff?|mp3|m4a|aac|ogg|midi?|wav|mp4|mov|webm|mpe?g|avi|ogv|flv|wmv)$ {
  149.             expires 7d;
  150.         }
  152.         # svg, fonts
  153.         location ~* \.(?:svgz?|ttf|ttc|otf|eot|woff2?)$ {
  154.             add_header Access-Control-Allow-Origin "*";
  155.             expires 7d;
  156.         }
  158.         # gzip
  159.         gzip on;
  160.         gzip_vary on;
  161.         gzip_proxied any;
  162.         gzip_comp_level 6;
  163.         gzip_types text/plain text/css text/xml application/json application/javascript application/rss+xml application/atom+xml image/svg+xml;
  164.     }
  166.     # non-www, subdomains redirect
  167.     server {
  168.         listen 443 ssl http2;
  169.         listen [::]:443 ssl http2;
  170.         server_name .mywebsite;
  172.         # SSL
  173.         ssl_certificate /etc/nginx/ssl/mywebsite.crt;
  174.         ssl_certificate_key /etc/nginx/ssl/mywebsite.key;
  175.         return 301 https://mysite$request_uri;
  176.     }
  178.     # HTTP redirect
  179.     server {
  180.         listen 80;
  181.         listen [::]:80;
  182.         server_name .mywebsite;
  183.         return 301 https://www.mywebsite$request_uri;
  184.     }
  185. }

型
经过长时间的搜索，我已经尝试了各种各样的东西，如
在nginx配置中添加规则：

  1. add_header 'Access-Control-Allow-Origin' "*";
  1. add_header 'Access-Control-Allow-Origin' "$http_origin";

的字符串

  • 添加始终
  1. add_header 'Access-Control-Allow-Origin' "*" always;

型

  • 添加类型判断
  1. if ($request_method = 'OPTIONS') {
  2.   add_header 'Access-Control-Allow-Origin' "*";
  3.   return 204
  4. }

型
在杜松子酒中添加标题

  1. c.Header("Access-Control-Allow-Origin", "*")

型
从后端删除cors函数，仅用于nginx
它们都不工作。

nginx

1条答案

按热度按时间
lymnna71

lymnna711#

我发现这个解决方案https://www.lcgod.com/articles/94它看起来像nginx的重定向301将导致头部丢失，更改状态码为307来解决这个问题.

  1. server {
  2.         listen 443 ssl http2;
  3.         listen [::]:443 ssl http2;
  4.         server_name .mywebsite;
  6.         # SSL
  7.         ssl_certificate /etc/nginx/ssl/mywebsite.crt;
  8.         ssl_certificate_key /etc/nginx/ssl/mywebsite.key;
  9.         return 307 https://mywebsite.site$request_uri;
  10.     }

字符串

赞(0）分享  回复(0）举报  2024-01-06
我来回答

相关问题

    查看更多

    热门标签

    更多
    JavaquerypythonNode开发语言requestUtil数据库Table后端算法LoggerMessageElementParser

    最新问答

    更多
    • 蜀ICP备13028337号-1 大数据知识库 https://www.saoniuhuo.com © All rights reserved
    • 本站内容来源互联网,如果侵犯您的权益请联系我们删除, 联系方式：448109455@qq.com