refactor: 修改跨域返回头中允许Authorization暴露

2025-03-29 15:35:11 +08:00
parent f671dbbd19
commit 68f7ed356f
3 changed files with 7 additions and 3 deletions
--- a/config/cors.php
+++ b/config/cors.php
@@ -6,7 +6,7 @@ return [
    'allowed_origins_patterns' => [],
    'allowed_methods'          => ['GET', 'POST', 'DELETE', 'PUT', 'OPTIONS'],
    'allowed_headers'          => ['Content-Type', 'Authorization', 'Refresh-Authorization', 'Content-Disposition'],
-    'exposed_headers'          => [],
+    'exposed_headers'          => ['Authorization'],
    'max_age'                  => 7200,
    'supports_credentials'     => true,
 ];