定义了一个MyCrossOriginFilter.class,并在Access-Control-Allow-Headers 额外添加了允许"token"，客户端ajax请求带有token时有个别接口不支持跨域了，请求不带token就支持跨域。什么原因呢？

另外，两个不同的Control都定义有相同的@At("/campaign/list") url，会影响跨域请求么？

public class MyCrossOriginFilter implements ActionFilter {

private static final Log log = Logs.get();

protected String origin;

protected String methods;

protected String headers;

protected String credentials;

public MyCrossOriginFilter() {

this("*", "GET, POST, PUT, DELETE, OPTIONS, PATCH", "Origin, Content-Type, Accept, Authorization, X-Requested-With,token", "true");

}

public MyCrossOriginFilter(String origin, String methods, String headers, String credentials) {

this.origin = origin;

this.methods = methods;

this.headers = headers;

this.credentials = credentials;

}

public View match(ActionContext ac) {

HttpServletResponse resp = ac.getResponse();

if (!Strings.isBlank(this.origin)) {

resp.setHeader("Access-Control-Allow-Origin", this.origin);

}

if (!Strings.isBlank(this.methods)) {

resp.setHeader("Access-Control-Allow-Methods", this.methods);

}

if (!Strings.isBlank(this.headers)) {

resp.setHeader("Access-Control-Allow-Headers", this.headers);

}

if (!Strings.isBlank(this.credentials)) {

resp.setHeader("Access-Control-Allow-Credentials", this.credentials);

}

if ("OPTIONS".equals(ac.getRequest().getMethod())) {

if (log.isDebugEnabled()) {

log.debugf("Feedback -- [%s] [%s] [%s] [%s]", new Object[]{this.origin, this.methods, this.headers, this.credentials});

}

return new VoidView();

}

return null;

}

}

@IocBean(name = "adsHome")

@Filters({ @By(type = MyActionFilter.class, args = {""})})

@At("ads/home")

public class HomeControl extends BaseController {

@At("/campaign/list")

@Ok("json")

@Filters({@By(type = MyCrossOriginFilter.class)})

public ReturnObject campaignList() {

ReturnObject result = new ReturnObject();

return result;

}

}

@IocBean(name = "adsReport")

@Filters({@By(type = MyActionFilter.class, args = {""})})

@At("ads/report")

public class ReportControl extends BaseController {

/**

* 分页列表

*

* @param search

* @return

*/

@At("/campaign/list")

@Ok("json")

@Filters({@By(type = MyCrossOriginFilter.class), @By(type = MyActionFilter.class, args = "")})

public ReturnObject listCampaignList(@Param("..") CampaignReport search) {

ReturnObject ro = new ReturnObject();

return ro;

}

}