feature: 关闭csrf

app/web/service/http.service.ts

@@ -25,8 +25,8 @@ const pending = {};
 let reqNum = 0;
 axios.defaults.baseURL = basicConfig.apiHost;
 axios.defaults.timeout = 30000;
-axios.defaults.xsrfHeaderName = 'x-csrf-token';
-axios.defaults.xsrfCookieName = 'csrfToken';
+// axios.defaults.xsrfHeaderName = 'x-csrf-token';
+// axios.defaults.xsrfCookieName = 'csrfToken';
 
 const wait = async seconds => new Promise(resolve => setTimeout(resolve, seconds));
 

config/config.default.ts

@@ -41,5 +41,11 @@ export default (appInfo: EggAppConfig) => {
     allowMethods: 'GET,HEAD,PUT,POST,DELETE,PATCH'
   };
 
+  config.security = {
+    csrf: {
+      enable: false
+    }
+  };
+
   return config;
 };