期待demo

`

namespace mycore\libs;

use \Closure;
use Yii;
use yii\base\ActionEvent;
use yii\base\Behavior;
use yii\web\Controller;

class CrossOriginBehavior extends Behavior
{

public $actions = [];

public function events()
{
    return [Controller::EVENT_BEFORE_ACTION => 'beforeAction'];
}

/**
 * @param $event
 * @return bool
 */
public function beforeAction($event)
{
    $action = $event->action->id;
    if(in_array($action, $this->actions)){
        // 指定允许其他域名访问
        //header('Access-Control-Allow-Origin:*');
        //header('Access-Control-Allow-Methods:POST,GET,OPTIONS'); //支持的http 动作
        //header('Access-Control-Allow-Headers:x-requested-with,content-type');
        $response = Yii::$app->getResponse();
        $response->getHeaders()->set('Access-Control-Allow-Origin', '*');
        $response->getHeaders()->set('Access-Control-Allow-Methods', 'POST,GET,OPTIONS');
        $response->getHeaders()->set('Access-Control-Allow-Headers', 'x-requested-with,content-type');

        //如果是OPTIONS操作，直接返回页面就可以，不需要返回具体业务信息
        if (Yii::$app->request->getMethod() == 'OPTIONS') {
            $response->data = 'options';
            $response->send();
            Yii::$app->end();
        }

        return true;
    }
}

}`

在controll中应用
` public function behaviors()

{
    return [
        'verbs' => [
            'class' => VerbFilter::className(),
            'actions' => [
                'mod-avatar'=> ['POST','OPTIONS'],
            ],
        ],
        'CrossOriginBehavior' => [
            'class' => CrossOriginBehavior::className(),
            'actions' => [
                'mod-avatar'
            ]
        ]
    ];
}`