feat: rbac迁移完成，并已部署至dev服务器

2026-05-01 01:19:50 +08:00
parent f80a3dc064
commit 8b11068fef
250 changed files with 6314 additions and 13072 deletions
@@ -42,6 +42,8 @@ func (m *CorsMiddleware) Handle(next http.HandlerFunc) http.HandlerFunc {
 			w.Header().Set("Access-Control-Allow-Headers", strings.Join(m.allowHeaders, ", "))
 			w.Header().Set("Access-Control-Allow-Credentials", "true")
 			w.Header().Set("Access-Control-Max-Age", "3600")
+			// 允许前端 JS 读取自定义响应头（用于 Token 自动续期）
+			w.Header().Set("Access-Control-Expose-Headers", "X-Refresh-Token")
 		}

 		// 预检请求直接返回