|  |  | 
 |  |  |  | 
 |  |  | import java.util.ArrayList; | 
 |  |  | import java.util.Arrays; | 
 |  |  | import java.util.Collections; | 
 |  |  |  | 
 |  |  | /** | 
 |  |  |  * 配置Spring Security | 
 |  |  | 
 |  |  |         corsConfiguration.setAllowedHeaders(Arrays.asList("*")); | 
 |  |  |         corsConfiguration.setAllowedMethods(Arrays.asList("*")); | 
 |  |  |         corsConfiguration.setMaxAge(3600L); | 
 |  |  |         corsConfiguration.setAllowCredentials(true); | 
 |  |  |         corsConfiguration.setAllowedOrigins(userSetting.getAllowedOrigins()); | 
 |  |  |         if (userSetting.getAllowedOrigins() != null && !userSetting.getAllowedOrigins().isEmpty()) { | 
 |  |  |             corsConfiguration.setAllowCredentials(true); | 
 |  |  |             corsConfiguration.setAllowedOrigins(userSetting.getAllowedOrigins()); | 
 |  |  |         }else { | 
 |  |  |             corsConfiguration.setAllowCredentials(false); | 
 |  |  |             corsConfiguration.setAllowedOrigins(Collections.singletonList(CorsConfiguration.ALL)); | 
 |  |  |         } | 
 |  |  |  | 
 |  |  |         corsConfiguration.setExposedHeaders(Arrays.asList(JwtUtils.getHeader())); | 
 |  |  |  | 
 |  |  |         UrlBasedCorsConfigurationSource url = new UrlBasedCorsConfigurationSource(); |