在Gin框架中解决跨域问题的多种方法

package main

import (
	"fmt"
	"github.com/gin-gonic/gin"
	"net/http"
	"strings"
)

// 跨域中间件
func Cors() gin.HandlerFunc {
	return func(c *gin.Context) {
		method := c.Request.Method // 请求方法
		origin := c.Request.Header.Get("Origin") // 请求头部
		var headerKeys []string // 声明请求头keys
		for k, _ := range c.Request.Header {
			headerKeys = append(headerKeys, k)
		}
		headerStr := strings.Join(headerKeys, ", ")
		if headerStr != "" {
			headerStr = fmt.Sprintf("access-control-allow-origin, access-control-allow-headers, %s", headerStr)
		} else {
			headerStr = "access-control-allow-origin, access-control-allow-headers"
		}
		if origin != "" {
			c.Writer.Header().Set("Access-Control-Allow-Origin", "*")
			c.Header("Access-Control-Allow-Origin", "*") // 允许访问所有域
			c.Header("Access-Control-Allow-Methods", "POST, GET, OPTIONS, PUT, DELETE, UPDATE") // 服务器支持的所有跨域请求的方法
			c.Header("Access-Control-Allow-Headers", "Authorization, Content-Length, X-CSRF-Token, Token, session, X_Requested_With, Accept, Origin, Host, Connection, Accept-Encoding, Accept-Language, DNT, X-CustomHeader, Keep-Alive, User-Agent, X-Requested-With, If-Modified-Since, Cache-Control, Content-Type, Pragma") // 允许的头类型
			c.Header("Access-Control-Expose-Headers", "Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, FooBar") // 允许跨域设置，可以返回其他子段
			c.Header("Access-Control-Max-Age", "172800") // 缓存请求信息，单位为秒
			c.Header("Access-Control-Allow-Credentials", "false") // 跨域请求是否需要带cookie信息，默认设置为true
			c.Set("content-type", "application/json") // 设置返回格式是json
		}
		// 放行所有OPTIONS方法
		if method == "OPTIONS" {
			c.JSON(http.StatusOK, "Options Request!")
		}
		// 处理请求
		c.Next()
	}
}

func main() {
	engine := gin.Default()
	// 允许使用跨域请求，全局中间件
	engine.Use(Cors())
	engine.Run(":11000") // 运行启动端口
}

go get -u github.com/gin-contrib/cors

package conf

import (
    "github.com/gin-contrib/cors"
    "time"
)

var CorsConfig = cors.Config{
    AllowAllOrigins:  false,
    AllowOrigins:     []string{"http://localhost:3000"}, // 允许的源，生产环境中应替换为具体的允许域名
    AllowOriginFunc:  func(origin string) bool { return true }, // 自定义函数来判断源是否允许
    AllowMethods:     []string{"GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS"}, // 允许的HTTP方法列表
    AllowHeaders:     []string{"Origin", "Content-Length", "Content-Type", "Authorization"}, // 允许的HTTP头部列表
    AllowCredentials: true,                             // 是否允许浏览器发送Cookie
    MaxAge:           10 * time.Minute,                 // 预检请求（OPTIONS）的缓存时间（秒）
}

package main

import (
    "github.com/gin-contrib/cors"
    "github.com/gin-gonic/gin"
    "goproject/conf" // 引入CORS配置
)

func main() {
    router := gin.Default()
    // 使用配置好的CORS规则
    router.Use(cors.New(conf.CorsConfig))

    // 定义路由
    router.GET("/ping", func(c *gin.Context) {
        c.JSON(200, gin.H{
            "message": "pong",
        })
    })

    router.Run(":8080") // 启动服务器
}

package main

import (
	"github.com/gin-gonic/gin"
)

func main() {
	router := gin.Default()

	// JSONP请求处理
	router.GET("/jsonp", func(c *gin.Context) {
		callback := c.Query("callback")
		data := map[string]interface{}{
			"title": "标题-jsonp",
			"desc":  "说明-jsonp",
			"content": "内容-jsonp",
		}
		c.JSONP(200, data)
	})

	router.Run(":8080")
}