From cef23c60a41d00953037888e755fa796fab3568d Mon Sep 17 00:00:00 2001
From: jiangjiazhi <jiangjiazhi@lymsh.com>
Date: Mon, 25 Apr 2016 16:20:00 +0800
Subject: [PATCH] =?UTF-8?q?=E5=A2=9E=E5=8A=A0=E9=85=8D=E7=BD=AE?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../src/main/webapp/WEB-INF/web.xml                | 47 ++++++++++++++++++++--
 .../src/main/webapp/clientaccesspolicy.xml         | 13 ++++++
 .../src/main/webapp/crossdomain.xml                |  4 --
 3 files changed, 56 insertions(+), 8 deletions(-)
 create mode 100644 platform-operate-api/src/main/webapp/clientaccesspolicy.xml

diff --git a/platform-operate-api/src/main/webapp/WEB-INF/web.xml b/platform-operate-api/src/main/webapp/WEB-INF/web.xml
index a0add13..e9d47b2 100644
--- a/platform-operate-api/src/main/webapp/WEB-INF/web.xml
+++ b/platform-operate-api/src/main/webapp/WEB-INF/web.xml
@@ -12,6 +12,49 @@
 <web-app xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 	version="2.5"
 	xsi:schemaLocation="http://java.sun.com/xml/ns/javaee           http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd">
+
+
+<filter>
+  <filter-name>CorsFilter</filter-name>
+  <filter-class>org.apache.catalina.filters.CorsFilter</filter-class>
+  <init-param>
+    <param-name>cors.allowed.origins</param-name>
+    <param-value>*</param-value>
+  </init-param>
+  <init-param>
+    <param-name>cors.allowed.methods</param-name>
+    <param-value>GET,POST,HEAD,OPTIONS,PUT,DELETE</param-value>
+  </init-param>
+  <init-param>
+    <param-name>cors.allowed.headers</param-name>
+    <param-value>Content-Type,X-Requested-With,accept,Origin,Access-Control-Request-Method,Access-Control-Request-Headers,authorization</param-value>
+  </init-param>
+  <init-param>
+    <param-name>cors.exposed.headers</param-name>
+    <param-value>Access-Control-Allow-Origin,Access-Control-Allow-Credentials</param-value>
+  </init-param>
+  <init-param>
+    <param-name>cors.support.credentials</param-name>
+    <param-value>true</param-value>
+  </init-param>
+  <init-param>
+    <param-name>cors.preflight.maxage</param-name>
+    <param-value>10</param-value>
+  </init-param>
+</filter>
+<filter-mapping>
+  <filter-name>CorsFilter</filter-name>
+  <url-pattern>/*</url-pattern>
+</filter-mapping>
+
+
+<servlet-mapping>
+        <servlet-name>default</servlet-name>
+        <url-pattern>*.xml</url-pattern>
+    </servlet-mapping>
+
+
+
 	<context-param>
 		<param-name>contextConfigLocation</param-name>
 		<param-value>
@@ -27,10 +70,6 @@
 		<param-value>classpath:log4j_config.xml</param-value>
 	</context-param>
 	<context-param>
-		<param-name>webAppRootKey</param-name>
-		<param-value>webapp.operate</param-value>
-	</context-param>
-	<context-param>
 		<param-name>log4jRefreshInterval</param-name>
 		<param-value>60000</param-value>
 	</context-param>
diff --git a/platform-operate-api/src/main/webapp/clientaccesspolicy.xml b/platform-operate-api/src/main/webapp/clientaccesspolicy.xml
new file mode 100644
index 0000000..f182607
--- /dev/null
+++ b/platform-operate-api/src/main/webapp/clientaccesspolicy.xml
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="utf-8" ?>
+    <access-policy>  
+      <cross-domain-access>  
+        <policy>  
+          <allow-from http-request-headers="*">  
+            <domain uri="*"/>  
+          </allow-from>  
+          <grant-to>  
+            <resource path="/" include-subpaths="true"/>  
+          </grant-to>  
+        </policy>  
+      </cross-domain-access>  
+    </access-policy>  
\ No newline at end of file
diff --git a/platform-operate-api/src/main/webapp/crossdomain.xml b/platform-operate-api/src/main/webapp/crossdomain.xml
index 141465a..e69de29 100644
--- a/platform-operate-api/src/main/webapp/crossdomain.xml
+++ b/platform-operate-api/src/main/webapp/crossdomain.xml
@@ -1,4 +0,0 @@
-<?xml version="1.0"?>
-<cross-domain-policy>
-    <allow-access-from domain="document.stage.healthbaby.com.cn"/>
-</cross-domain-policy>
\ No newline at end of file
-- 
1.8.3.1