Like Stefan Isele has already mentioned it seems that spring security redirects or doesn't add the CORS header so that's why the request seems to be broken. So while spring security is checking the authentification it has to add the proper header. 文件存储与管理：百度网盘允许用户上传、下载、存储各种类型的文件，包括但不限于文档、图片、视频、音频等。这为用户提供了一个便捷的文件管理平台... https://erniem285pqq3.azzablog.com/profile