When allowCredentials is true, allowedOrigins cannot contain the special value "*"since that cannot be set on the "Access-Control-Allow-Origin" response header.

当allowCredentials为true时，allowedOrigins不能包含特殊值“*”，因为无法在“Access Control Allow Origin”响应头上设置该值。

To allow credentials to a set of origins, list them explicitly or consider using "allowedOriginPatterns" instead.
要允许一组来源的凭证，请明确列出它们或考虑改用“allowedOriginPatterns”。

springboot升级，旧项目的跨域配置改用allowedOriginPatterns