页面嵌入iframe Cookie丢失问题以及解决过程
作者：花开不识君
文章介绍了在页面嵌入iframe时遇到的cookie丢失问题,提出了解决方案：后端将cookie以链接参数的形式传递给前端,前端在请求接口时将cookie放在请求头中,后端通过拦截器解析并重新放置cookie
页面嵌入iframe Cookie丢失问题
遇到的问题
自身页面以iframe的形式嵌入三方页面中，双方域名不一致导致自身页面的cookie被某些浏览器拦截无法正常被保存到客户端
解决方案
- 后端将cookie以链接参数的形式带给前端
- 前端在请求接口的时候将cookie放在请求头（这里无法直接在请求头放置Cookie参数，需要使用一个新的参数来放置Cookie）
- 后端使用拦截器获获取请求头中Cookie副本解析后重新放置到Cookie中
后端部分实现示例代码
解析获取Response中的Cookie
// 从Response Header 中的 Set-Cookie解析
for (String cookie : response.getHeaders("Set-Cookie")) {
cookie = cookie.split(";")[0];
String[] split = cookie.split("=", 2);
cookieMap.put(split[0], split[1]);
}
后端拦截器设置设置Coookie
@Component
@Order(1)
public class HeaderCookieFilter implements Filter {
private static final Logger log = LoggerFactory.getLogger(HeaderCookieFilter.class);
private final String HEADER_COOKIE_KEY = "identityKey";
@Override
public void init(FilterConfig filterConfig) throws ServletException {
}
@Override
public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
try {
HttpServletRequestWrapper customRequest = (HttpServletRequestWrapper)request;
JSONObject cookieInfo = check(request);
//如果校验通过
if(cookieInfo!=null) {
Cookie[] cookies = new Cookie[cookieInfo.size()];
// 修改cookie
Iterator<String> iterator = cookieInfo.keySet().iterator();
for (int i = 0; i < cookieInfo.keySet().size(); i++) {
String key = iterator.next();
String value = cookieInfo.getString(key);
Cookie cookie = new Cookie(key, value);
cookies[i] = cookie;
}
request = new CustomRequest(customRequest, cookies);
}
}catch (Exception e){
log.error("header transfor cookie error",e);
}
chain.doFilter(request,response);
}
@Override
public void destroy() {
}
private JSONObject check(ServletRequest request) throws UnsupportedEncodingException {
HttpServletRequestWrapper customRequest = (HttpServletRequestWrapper)request;
// 不存在identityKey请求头，直接跳过
String allCookieStrEncode = customRequest.getHeader(HEADER_COOKIE_KEY);
boolean hasHeaderCookie = StringUtils.isNotEmpty(allCookieStrEncode);
if(!hasHeaderCookie){
return null;
}
String cookieStr = URLDecoder.decode(allCookieStrEncode, CharEncoding.UTF_8);
JSONObject cookieInfo = JSON.parseObject(cookieStr);
return cookieInfo;
}
class CustomRequest extends HttpServletRequestWrapper {
Cookie[] cookies;
public CustomRequest(HttpServletRequest request, Cookie[] cookies) {
super(request);
this.cookies = cookies;
}
@Override
public Cookie[] getCookies(){
return cookies;
}
}
}
总结
以上为个人经验，希望能给大家一个参考，也希望大家多多支持脚本之家。