优化 cors 设置

app.js

@@ -7,12 +7,14 @@ let cache = apicache.middleware
 
 // 跨域设置
 // app.all('*', function (req, res, next) {
-//   res.header("Access-Control-Allow-Credentials", true)
-//   res.header("Access-Control-Allow-Origin", "*")
-//   res.header("Access-Control-Allow-Headers", "X-Requested-With")
-//   res.header("Access-Control-Allow-Methods", "PUT,POST,GET,DELETE,OPTIONS")
-//   res.header("X-Powered-By", ' 3.2.1')
-//   res.header("Content-Type", "application/json;charset=utf-8")
+//   if (req.path !== '/' && !req.path.includes('.')) {
+//     res.header('Access-Control-Allow-Credentials', true)
+//     // 这里获取 origin 请求头 而不是用 *
+//     res.header('Access-Control-Allow-Origin', req.headers['origin'] || '*')
+//     res.header('Access-Control-Allow-Headers', 'X-Requested-With')
+//     res.header('Access-Control-Allow-Methods', 'PUT,POST,GET,DELETE,OPTIONS')
+//     res.header('Content-Type', 'application/json;charset=utf-8')
+//   }
 //   next()
 // })
 

package.json

 {
   "name": "NeteaseCloudMusicApi",
-  "version": "2.6.3",
+  "version": "2.6.5",
   "description": "网易云音乐 NodeJS 版 API",
   "scripts": {
     "start": "node app.js",