Request header field Authorization is not allowed by Access-Control-Allow-Headers in preflight response

Cookie和token的区别