mojiahui/webman-buildadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

测试分支-部署-优化跨域报错

Browse Source
This commit is contained in:
zhenhui
2026-03-21 14:01:11 +08:00
parent c4c17180ee
commit ac30d8d1c9
1 changed files with 41 additions and 42 deletions
Download Patch File Download Diff File Expand all files Collapse all files

83
app/common/middleware/AllowCrossDomain.php
View File

@@ -21,46 +21,6 @@ class AllowCrossDomain implements MiddlewareInterface
'Access-Control-Allow-Headers' => '*', 'Access-Control-Allow-Headers' => '*',
]; ];
/**
* 根据 Origin 与配置写入 Access-Control-Allow-Origin。
* 注意：* 与 Access-Control-Allow-Credentials:true 不能同时出现，故通配时去掉 Credentials。
*/
private static function applyCorsOrigin(Request $request, array $header): array
{
$origin = $request->header('origin');
if (is_array($origin)) {
$origin = $origin[0] ?? '';
}
$origin = is_string($origin) ? trim($origin) : '';
$corsDomain = array_map('trim', explode(',', config('buildadmin.cors_request_domain', '')));
$corsDomain[] = $request->host(true);
$wildcard = in_array('*', $corsDomain);
if ($origin !== '') {
$info = parse_url($origin);
$host = '';
if (is_array($info)) {
$host = $info['host'] ?? '';
}
$allowed = $wildcard
|| in_array($origin, $corsDomain)
|| in_array($host, $corsDomain)
|| ($host === 'localhost' || $host === '127.0.0.1');
if ($allowed) {
$header['Access-Control-Allow-Origin'] = $origin;
}
return $header;
}
if ($wildcard) {
$header['Access-Control-Allow-Origin'] = '*';
unset($header['Access-Control-Allow-Credentials']);
}
return $header;
}
/** /**
* 返回 CORS 预检（OPTIONS）响应，供路由直接调用（Webman 未匹配路由时不走中间件） * 返回 CORS 预检（OPTIONS）响应，供路由直接调用（Webman 未匹配路由时不走中间件）
*/ */
@@ -72,7 +32,24 @@ class AllowCrossDomain implements MiddlewareInterface
'Access-Control-Allow-Methods' => 'GET, POST, PUT, DELETE, PATCH, OPTIONS', 'Access-Control-Allow-Methods' => 'GET, POST, PUT, DELETE, PATCH, OPTIONS',
'Access-Control-Allow-Headers' => 'Content-Type, Authorization, batoken, ba-user-token, think-lang', 'Access-Control-Allow-Headers' => 'Content-Type, Authorization, batoken, ba-user-token, think-lang',
]; ];
$header = self::applyCorsOrigin($request, $header); $origin = $request->header('origin');
if (is_array($origin)) {
$origin = $origin[0] ?? '';
}
$origin = is_string($origin) ? trim($origin) : '';
if ($origin !== '') {
$info = parse_url($origin);
$host = $info['host'] ?? '';
$corsDomain = array_map('trim', explode(',', config('buildadmin.cors_request_domain', '')));
$corsDomain[] = $request->host(true);
$allowed = in_array('*', $corsDomain)
|| in_array($origin, $corsDomain)
|| in_array($host, $corsDomain)
|| ($host === 'localhost' || $host === '127.0.0.1');
if ($allowed) {
$header['Access-Control-Allow-Origin'] = $origin;
}
}
return response('', 204, $header); return response('', 204, $header);
} }
@@ -83,7 +60,29 @@ class AllowCrossDomain implements MiddlewareInterface
return $handler($request); return $handler($request);
} }
$header = self::applyCorsOrigin($request, $this->header); $header = $this->header;
$origin = $request->header('origin');
if (is_array($origin)) {
$origin = $origin[0] ?? '';
}
$origin = is_string($origin) ? trim($origin) : '';
if ($origin !== '') {
$info = parse_url($origin);
$host = $info['host'] ?? '';
$corsDomain = array_map('trim', explode(',', config('buildadmin.cors_request_domain', '')));
$corsDomain[] = $request->host(true);
$allowed = in_array('*', $corsDomain)
|| in_array($origin, $corsDomain)
|| in_array($host, $corsDomain)
|| ($host === 'localhost' || $host === '127.0.0.1');
if ($allowed) {
$header['Access-Control-Allow-Origin'] = $origin;
}
}
if ($request->method() === 'OPTIONS') { if ($request->method() === 'OPTIONS') {
return response('', 204, $header); return response('', 204, $header);