package middleware

import (
	"github.com/gin-contrib/cors"
	"github.com/gin-gonic/gin"
)

func CORSMiddleware() gin.HandlerFunc {
	return cors.New(cors.Config{
		// 内网运维平台:同源部署为主,开发端口不固定,按 Origin 回显放行
		// (鉴权走 Bearer Token 不依赖 Cookie,CSRF 面可控)
		AllowOriginFunc: func(origin string) bool {
			return origin != ""
		},
		AllowMethods:     []string{"GET", "POST", "PUT", "DELETE", "PATCH", "OPTIONS"},
		AllowHeaders:     []string{"Origin", "Content-Type", "Authorization"},
		ExposeHeaders:    []string{"Content-Length"},
		AllowCredentials: false,
	})
}