27 lines
725 B
Go
27 lines
725 B
Go
package middleware
|
|
|
|
import "time"
|
|
|
|
import (
|
|
"github.com/gin-contrib/cors"
|
|
)
|
|
|
|
var CSRFMiddleware = cors.New(cors.Config{
|
|
//准许跨域请求网站,多个使用,分开,限制使用*
|
|
AllowOrigins: []string{"*"},
|
|
//准许使用的请求方式
|
|
AllowMethods: []string{"OPTIONS", "PUT", "PATCH", "POST", "GET", "DELETE"},
|
|
//准许使用的请求表头
|
|
AllowHeaders: []string{"Origin", "AccessToken", "Content-Type"},
|
|
//显示的请求表头
|
|
ExposeHeaders: []string{"Content-Type"},
|
|
//凭证共享,确定共享
|
|
AllowCredentials: true,
|
|
//容许跨域的原点网站,可以直接return true就万事大吉了
|
|
AllowOriginFunc: func(origin string) bool {
|
|
return true
|
|
},
|
|
//超时时间设定
|
|
MaxAge: 24 * time.Hour,
|
|
})
|