TP5和YII防止跨域的方法

最新推荐文章于 2024-01-18 15:03:49 发布

拥抱世界的精彩

最新推荐文章于 2024-01-18 15:03:49 发布

阅读量195

点赞数

分类专栏：跨域 TP5 Yii2 文章标签： TP5 Yii2 跨域

本文链接：https://blog.csdn.net/weixin_43946245/article/details/102911061

版权

跨域同时被 3 个专栏收录

2 篇文章 0 订阅

订阅专栏

Yii2

2 篇文章 0 订阅

订阅专栏

TP5

1 篇文章 0 订阅

订阅专栏

TP5：

  /*防止跨域*/      
        header('Access-Control-Allow-Origin: '.$_SERVER['HTTP_ORIGIN']);
        header('Access-Control-Allow-Credentials: true');
        header('Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS');
        header("Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, authKey, sessionId");

YII2：

  public function behaviors()
    {
          return ArrayHelper::merge([
                [
                        'class' => Cors::className(),
                        'cors' => [
                            'Origin' => ['*'],
                            'Access-Control-Request-Method' => ['GET','POST','DELETE','OPTIONS','PUT'],
                            'Access-Control-Request-Headers'=>['*']
                        ],

                ],
                //权限认证器
                'authenticator' =>[
                            'class' => CompositeAuth::className(),
                            'authMethods' => [
                                HttpBearerAuth::className(),
                            ],
                            'optional'  => [ 'login','authlogin','codelogin'],

                ]
        ], parent::behaviors());
    }