feat: implement CORS support with configurable allowed origins

2026-05-27 22:05:02 +08:00
parent 5bf4935a1f
commit 4d816182ee
6 changed files with 158 additions and 7 deletions
@@ -1,5 +1,11 @@
 server:
  port: 8083
+  cors:
+    # 浏览器跨域白名单。生产环境必须改为实际前端/嵌入站点域名，例如 https://kefu.example.com。
+    # 留空表示不允许跨域请求，只支持同源或非浏览器调用。
+    allowedOrigins:
+      - http://127.0.0.1:8083
+      - http://localhost:8083

 db:
  type: sqlite