实现exposed_headers参数

src/HandleCors.php

@@ -37,6 +37,7 @@ public function __construct(Config $config)
         $this->allowedOriginsPatterns = $options['allowed_origins_patterns'] ?? $this->allowedOriginsPatterns;
         $this->allowedMethods         = $options['allowed_methods'] ?? $this->allowedMethods;
         $this->allowedHeaders         = $options['allowed_headers'] ?? $this->allowedHeaders;
+        $this->exposedHeaders         = $options['exposed_headers'] ?? $this->exposedHeaders;
         $this->supportsCredentials    = $options['supports_credentials'] ?? $this->supportsCredentials;
 
         $maxAge = $this->maxAge;
@@ -45,9 +46,6 @@ public function __construct(Config $config)
         }
         $this->maxAge = $maxAge === null ? null : (int) $maxAge;
 
-        $exposedHeaders       = $options['exposed_headers'] ?? $this->exposedHeaders;
-        $this->exposedHeaders = $exposedHeaders === false ? [] : $exposedHeaders;
-
         // Normalize case
         $this->allowedHeaders = array_map('strtolower', $this->allowedHeaders);
         $this->allowedMethods = array_map('strtoupper', $this->allowedMethods);
@@ -96,6 +94,7 @@ protected function addPreflightRequestHeaders(Response $response, Request $reque
             $this->configureAllowCredentials($response, $request);
             $this->configureAllowedMethods($response, $request);
             $this->configureAllowedHeaders($response, $request);
+            $this->configureExposedHeaders($response, $request);            
             $this->configureMaxAge($response, $request);
         }
 
@@ -143,6 +142,14 @@ protected function configureAllowedHeaders(Response $response, Request $request)
         $response->header(['Access-Control-Allow-Headers' => $allowHeaders]);
     }
 
+    protected function configureExposedHeaders(Response $response, Request $request): void
+    {
+        if ($this->exposedHeaders) {
+            $exposeHeaders = implode(', ', $this->exposedHeaders);
+            $response->header(['Access-Control-Expose-Headers' => $exposeHeaders]);
+        }
+    }
+
     protected function configureMaxAge(Response $response, Request $request): void
     {
         if ($this->maxAge !== null) {