需要在AWS网关中设置CORS允许跨域请求。
{ "body-json" : $input.json('$'), "method" : "$context.httpMethod", "resource-path" : "$context.resourcePath", "headers" : { #foreach($header in $input.params().header.keySet()) "$header" : "$util.escapeJavaScript($input.params().header.get($header))" #if($foreach.hasNext),#end #end } }
#set($allowedOrigins = $input.params().header.get('Access-Control-Request-Headers')) #set($allowedOriginsList = []) #if($allowedOrigins == "") #set($allowedOrigins = "") #else #foreach($origin in $allowedOrigins.split(',')) #set($originTrimmed = $origin.trim()) #if($originTrimmed != "") #set($dummy = $allowedOriginsList.add($originTrimmed)) #end #end #if(!$allowedOriginsList.isEmpty()) #set($allowedOrigins = $allowedOriginsList.join(',')) #else #set($allowedOrigins = "") #end #end
#if($input.params().header.get("Origin")) #set($context.responseOverride.header.Access-Control-Allow-Origin = $input.params().header.get("Origin")) #set($context.responseOverride.header.Access-Control-Allow-Methods = "POST, GET, OPTIONS,PUT") #set($context.responseOverride.header.Access-Control-Allow-Headers = $allowedOrigins) #set($context.responseOverride.header.Access-Control-Allow-Credentials = true) #end
代码示例: 在 AWS API Gateway 中设置 CORS 属性的 Node.js 示例代码
const response = { statusCode: 200, headers: { 'Content-Type': 'application/json', 'Access-Control-Allow-Origin': '*', 'Access-Control-Allow-Credentials': true, 'Access-Control-Allow-Methods': 'OPTIONS,POST,GET', 'Access-Control-Allow-Headers': 'Content-Type,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token', }, body: JSON.stringify({ message: 'Hello from Lambda!', }), };
exports.handler = async (event) => { console.log('event:', event);
const { httpMethod } = event;
if (httpMethod === 'OPTIONS') {
return response;
}
return response;
};
此代码示例用于 AWS Lambda。
上一篇:AWS网关API中配置了TLSv1.0的自定义域名,但实际上似乎使用的是TLSv1.2。这是怎么回事?
下一篇:AWS网关CORS问题:没有“Access-Control-Allow-Origin”头信息,*我已经尝试了StackOverflow上所有的解决方案*