gateway结合jwt的token校验，网关跨域处理

网关过滤

@Component
@Slf4j
public class JwtWebFilter implements GlobalFilter, Ordered {
    @Value("${jwt.secret_key}")
    private String secretKey;
    @Value("${jwt.excluded_auth_url}")
    private String excludedAuthUrl;
    @Override
    public int getOrder() {
        return -100;
    }
    
    @Override
    public Mono filter(ServerWebExchange exchange, GatewayFilterChain chain) {

        ServerHttpResponse resp = exchange.getResponse();
        ServerHttpRequest request = exchange.getRequest();
        String[] excludedAuthUrlArr = excludedAuthUrl.split(",");
        String path = request.getPath().value();
        List tokenList = request.getHeaders().get("auth-token");
        //排除url直接放行
        if(!path.contains("/sastWeb/")){
            return chain.filter(exchange);
        }
        if (CollectionUtils.isEmpty(tokenList)) {
            log.info("JwtWebFilter.filter->请求未携带token");
            return authErro(resp,"登录过期，请重新登录");
        }
        String token = tokenList.get(0);
        //排除小程序端的的url直接放行
        if(Arrays.asList(excludedAuthUrlArr).contains(path)){
            return chain.filter(exchange);
        }
        //判断token是否过期
        if (JwtTokenUtils.isExpiration(token, secretKey)) {
            log.info("JwtWebFilter.filter->token时间过期");
            return authErro(resp,"登录过期，请重新登录");
        }
        return chain.filter(exchange);

    }

    
    private Mono authErro(ServerHttpResponse resp, String mess) {
        Gson gson=new Gson();
        resp.setStatusCode(HttpStatus.FORBIDDEN);
        resp.getHeaders().add("Content-Type", "application/json;charset=UTF-8");
        ResponseVO