CORS不能在Angular 2中使用chrome

Question

我正在使用javascript代码调用部署在weblogic上的soap webservice，并使用jaxws在java中开发。从IE11我正在从SOAP响应，但由镀铬我得到以下错误：

Response to preflight request doesn't pass access control check: 
No 'Access-Control-Allow-Origin' header is present on the requested resource. 
Origin 'http://localhost:4200' is therefore not allowed access. 
The response had HTTP status code 405. 

我已经加入CORS延伸的镀铬，然后我得到了以下新的错误：

Response for preflight has invalid HTTP status code 405 

我还设置请求头像如下：

xhr.setRequestHeader('Content-Type', 'text/xml; charset=utf-8'); 
xhr.setRequestHeader('Access-Control-Allow-Origin', '*'); 
xhr.setRequestHeader('Access-Control-Allow-Headers', 'X-Custom-Header'); 
xhr.setRequestHeader('Access-Control-Allow-Methods', 'GET,POST,OPTIONS,PUT,DELETE'); 

但仍然没有成功。

下面是我的代码片段调用部署在WebLogic

var soapMessage = this.createSOAPMessage(); 

    function createCORSRequest(method, url){ 
     var xhr = new XMLHttpRequest(); 
     if ("withCredentials" in xhr) { 
      xhr.open(method, url, true); 
     } else { 
      xhr = null; 
     } 
     return xhr; 
    } 

    var xhr = createCORSRequest('POST','http://IPAddress:7001/Path/ServiceImplService?WSDL'); 
    if(!xhr){ 
    console.log('XHR Issue'); 
    return; 
    } 

    xhr.setRequestHeader('Content-Type', 'text/xml; charset=utf-8'); 
    xhr.setRequestHeader('Access-Control-Allow-Origin', '*'); 
    xhr.setRequestHeader('Access-Control-Allow-Headers', 'X-Custom-Header'); 
    xhr.setRequestHeader('Access-Control-Allow-Methods', 'GET,POST,OPTIONS,PUT,DELETE'); 

    xhr.send(soapMessage); 

    var result 
    xhr.onload = function(){ 
     result = xhr.responseText; 
     console.log('===Result====> '+result); 
    } 
    return result; 

Answer 1

我的web服务在您的服务创建这个类：

@Provider 
@PreMatching 
public class CorsFilter implements ContainerResponseFilter { 

    @Override 
    public void filter(ContainerRequestContext requestCtx, ContainerResponseContext responseCtx) throws IOException { 

     responseCtx.getHeaders().add("Access-Control-Allow-Headers", "origin, content-type, accept, authorization"); 
     responseCtx.getHeaders().add("Access-Control-Allow-Origin", "*"); 
     responseCtx.getHeaders().add("Access-Control-Allow-Credentials", "true"); 
     responseCtx.getHeaders().add("Access-Control-Allow-Methods", "GET, POST"); 
    } 
}