Lane cross domain problem

For complex requests , The browser will send a pre check request first

 curl -i 'https://ds.fe.test.sankuai.com/api/groupfission/rule/activityList?page=1&size=10&title=' \
  -X 'OPTIONS' \
  -H 'Accept: */*' \
  -H 'Accept-Language: zh-CN,zh;q=0.9' \
  -H 'Access-Control-Request-Headers: access-token,client-id,swimlane' \
  -H 'Access-Control-Request-Method: GET' \
  -H 'Cache-Control: no-cache' \
  -H 'Connection: keep-alive' \
  -H 'Origin: http://127.0.0.1:8080' \
  -H 'Pragma: no-cache' \
  -H 'Referer: http://127.0.0.1:8080/' \
  -H 'swimlane: 38941-ujzun' \
  -H 'Sec-Fetch-Dest: empty' \
  -H 'Sec-Fetch-Mode: cors' \
  -H 'Sec-Fetch-Site: cross-site' \
  -H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36' \
  --compressed

SpringMVC Decision is the logic of pre inspection request ：

SpringMVC Cross domain Default processing class ：org.springframework.web.cors.DefaultCorsProcessor

No, cors To configure , Go straight back to .

HTTP/1.1 403 Forbidden
Server: openresty
Date: Thu, 21 Apr 2022 09:08:48 GMT
Content-Length: 20
Connection: keep-alive
M-TraceId: 5004084855451728121
Allow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH

Invalid CORS request%

If the lane is configured with a white list , Trunk without , When sending a pre inspection request , Due to missing header A fixed field causes a call to the trunk . Thus, a cross domain error is reported .

Reference resources
https://www.ruanyifeng.com/blog/2016/04/cors.html