<security-constraint>    <web-resource-collection>    <url-pattern>/*</url-pattern>    <http-method>PUT</http-method>    <http-method>DELETE</http-method>    <http-method>HEAD</http-method>    <!--<http-method>OPTIONS</http-method>-->  <!-- 注意需要去掉的就是这行，解决问题1 -->  <http-method>TRACE</http-method>    </web-resource-collection>    <auth-constraint>    </auth-constraint>
</security-constraint>
<login-config>    <auth-method>BASIC</auth-method>
</login-config> 

　　<!-- rest cors request filter 解决问题2--><filter><display-name>RequestHeaderFilter</display-name><filter-name>RequestHeaderFilter</filter-name><filter-class>com.xxx.filter.RequestHeaderFilter</filter-class></filter><filter-mapping><filter-name>RequestHeaderFilter</filter-name><url-pattern>/*</url-pattern></filter-mapping>

public final class RequestHeaderFilter implements Filter {/*** Default constructor.*/public RequestHeaderFilter() {}/*** @see Filter#destroy()*/public void destroy() {}/*** @see Filter#doFilter(ServletRequest, ServletResponse, FilterChain)*/public void doFilter(ServletRequest request, ServletResponse response,FilterChain chain) throws IOException, ServletException {// 设置允许跨域访问HttpServletResponse httpServletResponse = (HttpServletResponse)response;httpServletResponse.setHeader("Access-Control-Allow-Origin", "*");// 允许 header中包括 deviceName,deviceIDhttpServletResponse.setHeader("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept,deviceName,deviceID");chain.doFilter(request, httpServletResponse);}/*** @see Filter#init(FilterConfig)*/public void init(FilterConfig fConfig) throws ServletException {}}