yml文件配置，下面这下有问题

jhipster:
  cors:
    allowed-origins: 'http://localhost:8091,http://localhost,http://172.16.67.161:7171,http://116.204.122.21:9670,http://172.16.15.55:6600,http://localhost:9000'
    allow-credentials: true

  allowed-methods默认值只有get和header，所以其他请求都是跨域，

allowed-methods: 'POST, GET, OPTIONS, DELETE, PUT,PATCH, GET'

查看源码

没有配置，读取默认值

初始化只有，get和header

正确写法

jhipster:
  cors:
    allowed-origins: 'http://localhost:8091,http://localhost,http://172.16.67.161:7171,http://116.204.122.21:9670,http://172.16.15.55:6600,http://localhost:9000'
    allow-credentials: true
    allowed-headers: '**'
    allowed-methods: 'POST, GET, OPTIONS, DELETE, PUT,PATCH, GET'