控制器增加以下方法:
public function behaviors() { return ArrayHelper::merge([ [ 'class' => Cors::className(), 'cors'=>[ 'Origin' => ['*'], 'Access-Control-Allow-Credentials' => true, ] ], ], parent::behaviors()); }