Angular+SpringBoot注册POST请求403 Forbidden错误排查求助

我正在开发集成JWT认证的Angular/Java SpringBoot项目，实现登录/注册功能。参照教程调整代码适配现有项目，执行到教程44:22步骤时，教程中请求返回200状态码，但我点击注册按钮触发POST http://localhost:8080/register请求时，持续出现403 Forbidden错误。

报错信息 #

POST http://localhost:8080/register 403 (Forbidden)
scheduleTask @ zone.js:2645
scheduleTask @ zone.js:389
onScheduleTask @ core.mjs:10752
scheduleTask @ zone.js:382
onScheduleTask @ zone.js:279
scheduleTask @ zone.js:382
scheduleTask @ zone.js:216
scheduleMacroTask @ zone.js:239
scheduleMacroTaskWithCurrentZone @ zone.js:672
(anonymous) @ zone.js:2678
proto.<computed> @ zone.js:962
dispatchXhrRequest @ xhr.js:258
ZoneAwarePromise @ zone.js:1411
xhr @ xhr.js:49
dispatchRequest @ dispatchRequest.js:51
_request @ Axios.js:170
(anonymous) @ Axios.js:40
asyncGeneratorStep @ asyncToGenerator.js:3
_next @ asyncToGenerator.js:22
(anonymous) @ asyncToGenerator.js:27
ZoneAwarePromise @ zone.js:1411
(anonymous) @ asyncToGenerator.js:19
request @ Axios.js:59
wrap @ bind.js:5
request @ axios.service.ts:16
onRegister @ content.component.ts:25
ContentComponent_Template_app_login_form_onSubmitRegisterEvent_3_listener @ content.component.html:5
executeListenerWithErrorHandling @ core.mjs:16795
wrapListenerIn_markDirtyAndPreventDefault @ core.mjs:16828
next @ Subscriber.js:91
_next @ Subscriber.js:60
next @ Subscriber.js:31
(anonymous) @ Subject.js:34
errorContext @ errorContext.js:19
next @ Subject.js:27
emit @ core.mjs:10670
onSubmitRegister @ login-form.component.ts:33
LoginFormComponent_Template_form_ngSubmit_24_listener @ login-form.component.html:31
executeListenerWithErrorHandling @ core.mjs:16795
wrapListenerIn_markDirtyAndPreventDefault @ core.mjs:16828
next @ Subscriber.js:91
_next @ Subscriber.js:60
next @ Subscriber.js:31
(anonymous) @ Subject.js:34
errorContext @ errorContext.js:19
next @ Subject.js:27
emit @ core.mjs:10670
onSubmit @ forms.mjs:3474
NgForm_submit_HostBindingHandler @ forms.mjs:3506
executeListenerWithErrorHandling @ core.mjs:16795
wrapListenerIn_markDirtyAndPreventDefault @ core.mjs:16828
(anonymous) @ platform-browser.mjs:665
invokeTask @ zone.js:402
(anonymous) @ core.mjs:10757
onInvokeTask @ core.mjs:10757
invokeTask @ zone.js:401
onInvokeTask @ core.mjs:11070
invokeTask @ zone.js:401
runTask @ zone.js:173
invokeTask @ zone.js:483
invokeTask @ zone.js:1631
globalCallback @ zone.js:1662
globalZoneAwareCallback @ zone.js:1695
Show 58 more frames
Show less
axios.service.ts:16  ERROR Error: Uncaught (in promise): AxiosError: Request failed with status code 403
AxiosError: Request failed with status code 403
    at settle (settle.js:19:12)
    at XMLHttpRequest.onloadend [as __zone_symbol__ON_PROPERTYloadend] (xhr.js:111:13)
    at XMLHttpRequest.wrapFn (zone.js:755:39)
    at _ZoneDelegate.invokeTask (zone.js:402:31)
    at core.mjs:10757:55
    at AsyncStackTaggingZoneSpec.onInvokeTask (core.mjs:10757:36)
    at _ZoneDelegate.invokeTask (zone.js:401:60)
    at Object.onInvokeTask (core.mjs:11070:33)
    at _ZoneDelegate.invokeTask (zone.js:401:60)
    at Zone.runTask (zone.js:173:47)
    at Axios.js:45:41
    at Generator.throw (<anonymous>)
    at asyncGeneratorStep (asyncToGenerator.js:3:1)
    at _throw (asyncToGenerator.js:25:1)
    at _ZoneDelegate.invoke (zone.js:368:26)
    at Object.onInvoke (core.mjs:11083:33)
    at _ZoneDelegate.invoke (zone.js:367:52)
    at Zone.run (zone.js:129:43)
    at zone.js:1257:36
    at _ZoneDelegate.invokeTask (zone.js:402:31)
    at resolvePromise (zone.js:1193:31)
    at zone.js:1100:17
    at zone.js:1116:33
    at asyncGeneratorStep (asyncToGenerator.js:6:1)
    at _throw (asyncToGenerator.js:25:1)
    at _ZoneDelegate.invoke (zone.js:368:26)
    at Object.onInvoke (core.mjs:11083:33)
    at _ZoneDelegate.invoke (zone.js:367:52)
    at Zone.run (zone.js:129:43)
    at zone.js:1257:36

我的axios.service.ts代码 #

import { Injectable } from '@angular/core';
import axios from 'axios';

@Injectable({
  providedIn: 'root'
})
export class AxiosService {

  constructor() { 
    axios.defaults.baseURL = "http://localhost:8080"
    axios.defaults.headers.post["Content-type"] = "application/json"

  }

  request(method: string, url: string, data:any): Promise<any>{
    return axios({
      method: method,
      url: url,
      data: data
    })
  }
}

排查方向与解决方案 #

• CORS配置问题：检查SpringBoot后端是否配置了CORS，确保允许前端Origin（如http://localhost:4200）的POST请求。可以在注册接口添加@CrossOrigin注解，或全局配置CORS规则。
• Spring Security权限拦截：若集成了Spring Security，需将/register加入白名单，允许匿名访问。在Security配置类的configure(HttpSecurity http)方法中添加：http.authorizeRequests().antMatchers("/register").permitAll()。
• CSRF防护拦截：Spring Security默认开启CSRF防护，POST请求需携带CSRF token。可临时在配置中关闭CSRF（http.csrf().disable()）排查，若恢复正常，再配置前端传递X-XSRF-TOKEN请求头。
• 请求格式匹配：确认前端发送的JSON数据结构与后端接口接收的参数完全匹配，避免因参数不匹配触发拦截。

内容的提问来源于stack exchange，提问作者dinosow