From 9d7957d506caed71c0965b781bb515605552251c Mon Sep 17 00:00:00 2001
From: "HESU\\HESU" <1696136552@qq.com>
Date: Thu, 3 Jul 2025 10:41:55 +0800
Subject: [PATCH] =?UTF-8?q?=E8=B7=A8=E5=9F=9F?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 app/middleware/AccessControl.php | 26 ++++++++++++++++++++++++++
 config/middleware.php            |  6 +++++-
 2 files changed, 31 insertions(+), 1 deletion(-)
 create mode 100644 app/middleware/AccessControl.php

diff --git a/app/middleware/AccessControl.php b/app/middleware/AccessControl.php
new file mode 100644
index 0000000..2a93d79
--- /dev/null
+++ b/app/middleware/AccessControl.php
@@ -0,0 +1,26 @@
+<?php
+
+namespace app\middleware;
+
+use Webman\MiddlewareInterface;
+use Webman\Http\Response;
+use Webman\Http\Request;
+
+class AccessControl implements MiddlewareInterface
+{
+    public function process(Request $request, callable $handler) : Response
+    {
+        // 如果是options请求则返回一个空响应，否则继续向洋葱芯穿越，并得到一个响应
+        $response = $request->method() == 'OPTIONS' ? response('') : $handler($request);
+
+        // 给响应添加跨域相关的http头
+        $response->withHeaders([
+            'Access-Control-Allow-Credentials' => 'true',
+            'Access-Control-Allow-Origin' => $request->header('origin', '*'),
+            'Access-Control-Allow-Methods' => $request->header('access-control-request-method', '*'),
+            'Access-Control-Allow-Headers' => $request->header('access-control-request-headers', '*'),
+        ]);
+
+        return $response;
+    }
+}
\ No newline at end of file
diff --git a/config/middleware.php b/config/middleware.php
index 8e964ed..01e8367 100644
--- a/config/middleware.php
+++ b/config/middleware.php
@@ -12,4 +12,8 @@
  * @license   http://www.opensource.org/licenses/mit-license.php MIT License
  */
 
-return [];
\ No newline at end of file
+return [
+    '' => [
+        app\middleware\AccessControl::class
+    ],
+];
\ No newline at end of file