使用自定义标头的GET请求失败。

huangapple
go评论156阅读模式
英文:

Get request failed with custom header

问题

这是我的AngularJS代码（如果我删除header选项，它可以正常工作）。

  1. $http.get(env.apiURL()+'/banks', {
  2. 	headers: {
  3. 		'Authorization': 'Bearer '+localStorageService.get('access_token')
  4. 	}
  5. })

这是请求：

  1. OPTIONS /banks HTTP/1.1
  2. Host: localhost:8080
  3. Connection: keep-alive
  4. Access-Control-Request-Method: GET
  5. Origin: http://localhost:8081
  6. User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.146 Safari/537.36
  7. Access-Control-Request-Headers: accept, authorization
  8. Accept: */*
  9. Referer: http://localhost:8081/
  10. Accept-Encoding: gzip,deflate,sdch
  11. Accept-Language: en-US,en;q=0.8,vi;q=0.6

以及响应：

  1. HTTP/1.1 404 Not Found
  2. Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization
  3. Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
  4. Access-Control-Allow-Origin: http://localhost:8081
  5. Content-Type: text/plain; charset=utf-8
  6. Date: Mon, 17 Mar 2014 11:05:20 GMT
  7. Content-Length: 19

我添加了Accept和Authorization头，但请求仍然失败了。是大小写问题（即authorization与Authorization）导致了失败吗？如果是的话，我该如何让AngularJS停止这样做？

  1. if origin := req.Header.Get("Origin"); origin == "http://localhost:8081" {
  2. 	rw.Header().Set("Access-Control-Allow-Origin", origin)
  3. 	rw.Header().Set("Access-Control-Allow-Methods", "POST, GET, OPTIONS, PUT, DELETE")
  4. 	rw.Header().Set("Access-Control-Allow-Headers",
  5. 		"Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization")
  6. }

Go服务器路由代码：

  1. r := mux.NewRouter()
  2. r.HandleFunc("/banks", RetrieveAllBank).Methods("GET")
  3.     
  4. http.ListenAndServe(":8080", r)
英文:

Here is my AngularJS code, (it works fine if I remove the header option).

  1. $http.get(env.apiURL()+'/banks', {
  2. 	headers: {
  3. 		'Authorization': 'Bearer '+localStorageService.get('access_token')
  4. 	}
  5. })

Here is the request:

  1. OPTIONS /banks HTTP/1.1
  2. Host: localhost:8080
  3. Connection: keep-alive
  4. Access-Control-Request-Method: GET
  5. Origin: http://localhost:8081
  6. User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.146 Safari/537.36
  7. Access-Control-Request-Headers: accept, authorization
  8. Accept: */*
  9. Referer: http://localhost:8081/
  10. Accept-Encoding: gzip,deflate,sdch
  11. Accept-Language: en-US,en;q=0.8,vi;q=0.6

And response:

  1. HTTP/1.1 404 Not Found
  2. Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization
  3. Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
  4. Access-Control-Allow-Origin: http://localhost:8081
  5. Content-Type: text/plain; charset=utf-8
  6. Date: Mon, 17 Mar 2014 11:05:20 GMT
  7. Content-Length: 19

I added both Accept and Authorization header but the request still fails?
Does the capitalization (I mean authorization vs Authorization) result in that failure? If yes, how can I make AngularJS stop doing that?

  1. if origin := req.Header.Get("Origin"); origin == "http://localhost:8081" {
  2. 	rw.Header().Set("Access-Control-Allow-Origin", origin)
  3. 	rw.Header().Set("Access-Control-Allow-Methods", "POST, GET, OPTIONS, PUT, DELETE")
  4. 	rw.Header().Set("Access-Control-Allow-Headers",
  5. 		"Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization")
  6. }

Go server routing code:

  1. r := mux.NewRouter()
  2. r.HandleFunc("/banks", RetrieveAllBank).Methods("GET")
  3.     
  4. http.ListenAndServe(":8080", r)

答案1

得分: 8

好的，以下是翻译好的内容：

好的，问题是因为我忘记处理"OPTIONS"请求（为了使浏览器发送CORS，浏览器会首先发送一个预检请求OPTIONS，然后如果服务器接受，再发送真正的请求）。
我只需要修改我的Go服务器（请参考注释）：

  1. func main() {
  2.     r := mux.NewRouter()
  3.     r.HandleFunc("/banks", RetrieveAllBank).Methods("GET")
  4.     http.ListenAndServe(":8080", &MyServer{r})
  5. }
  7. type MyServer struct {
  8.     r *mux.Router
  9. }
  11. func (s *IMoneyServer) ServeHTTP(rw http.ResponseWriter, req *http.Request) {
  12.     if origin := req.Header.Get("Origin"); origin == "http://localhost:8081" {
  13.         rw.Header().Set("Access-Control-Allow-Origin", origin)
  14.         rw.Header().Set("Access-Control-Allow-Methods", "POST, GET, OPTIONS, PUT, DELETE")
  15.         rw.Header().Set("Access-Control-Allow-Headers",
  16.             "Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization")
  17.     }
  18.     // 如果是预检请求OPTIONS，则在此处停止处理
  19.     if req.Method == "OPTIONS" {
  20.         return
  21.     }
  22.     // 让Gorilla处理
  23.     s.r.ServeHTTP(rw, req)
  24. }
英文:

OK, the issue because I fotgot to handle the "OPTIONS" request (to make a CORS browser will send a preflight OPTIONS request first and then the 'real' request if accepted by the server).
I only need to modify my Go server (see the comment):

  1. func main() {
  2. 	r := mux.NewRouter()
  3. 	r.HandleFunc("/banks", RetrieveAllBank).Methods("GET")
  4. 	http.ListenAndServe(":8080", &MyServer{r})
  5. }
  7. type MyServer struct {
  8. 	r *mux.Router
  9. }
  11. func (s *IMoneyServer) ServeHTTP(rw http.ResponseWriter, req *http.Request) {
  12. 	if origin := req.Header.Get("Origin"); origin == "http://localhost:8081" {
  13. 		rw.Header().Set("Access-Control-Allow-Origin", origin)
  14. 		rw.Header().Set("Access-Control-Allow-Methods", "POST, GET, OPTIONS, PUT, DELETE")
  15. 		rw.Header().Set("Access-Control-Allow-Headers",
  16. 			"Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization")
  17. 	}
  18. 	// Stop here if its Preflighted OPTIONS request
  19. 	if req.Method == "OPTIONS" {
  20. 		return
  21. 	}
  22. 	// Lets Gorilla work
  23. 	s.r.ServeHTTP(rw, req)
  24. }

huangapple
  • 本文由 发表于 2014年3月17日 19:11:56
  • 转载请务必保留本文链接：https://go.coder-hub.com/22452804.html
  • angularjs
  • cors
  • cross-browser
  • go
  • javascript
匿名

发表评论

匿名网友

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen:

确定