优化请求头部全部开发，错误返回请求错误码43

app/controller/admin/Base.php

@@ -92,6 +92,7 @@ class Base extends BaseController {
             break;
             case  ReturnCode::INVALID:
                 $httpCode = 404;
+            break;
             //ReturnCode::NO_PERMISSION         => 403,
             default :
                 $httpCode =  400;

app/controller/api/Base.php

@@ -48,6 +48,7 @@ class Base extends BaseController {
                 break;
             case  ReturnCode::INVALID:
                 $httpCode = 404;
+            break;
             //ReturnCode::NO_PERMISSION         => 403,
             default :
                 $httpCode =  400;

app/middleware/AdminResponse.php

@@ -19,7 +19,7 @@ class AdminResponse
         }
         $response->header([
             'Vary'                             => 'Origin',
-            'Access-Control-Allow-Methods'     => 'POST,GET,OPTIONS',
+            'Access-Control-Allow-Methods'     => 'POST,GET',
             'Access-Control-Allow-Headers'     => 'Api-Auth,token,Authorization,Content-Type,X-Requested-With',
             'Access-Control-Allow-Credentials' => 'true',
         ]);

app/middleware/WikiAuth.php

@@ -41,7 +41,7 @@ class WikiAuth {
                 'code' => ReturnCode::AUTH_ERROR,
                 'msg'  => '缺少ApiAuth',
                 'data' => []
-            ])->header($header);
+            ], 403)->header($header);
         }
     }
 }

config/session.php

@@ -16,7 +16,7 @@ return [
     'expire'         => 1440,
     // 前缀
     'prefix'         => '',
-    'secure'         => true,
-    'httponly'       => true,
-    'samesite'       => 'Lax',
+    'cookie_secure'   => true,  // 对应 session.cookie_secure
+    'cookie_httponly' => true, // 对应 session.cookie_httponly
+    'cookie_samesite' => 'Lax', // 对应 session.cookie_samesite
 ];