refactor: 修改跨域返回头中允许Authorization暴露

config/cors.php

@@ -6,7 +6,7 @@ return [
     'allowed_origins_patterns' => [],
     'allowed_methods'          => ['GET', 'POST', 'DELETE', 'PUT', 'OPTIONS'],
     'allowed_headers'          => ['Content-Type', 'Authorization', 'Refresh-Authorization', 'Content-Disposition'],
-    'exposed_headers'          => [],
+    'exposed_headers'          => ['Authorization'],
     'max_age'                  => 7200,
     'supports_credentials'     => true,
 ];