还是 vue + Yii 前后端分离的跨域问题 [ 2.0 版本 ]

通过搜索引擎发现在本站这个问题也提了很多遍了，但确实是没找到可行的解决方法，可能究其原因还是自身基础知识掌握不牢固，太零散，用起来的时候各种混乱。

按照 https://www.yiichina.com/question/3570 和 https://www.yiichina.com/question/3281 的方法都试过了

现象：不停提示 No 'Access-Control-Allow-Origin' header is present on the requested resource.

根据 https://stackoverflow.com/questions/41647444/yii2-cors-filters-error-that-no-access-control-allow-origin-header-is-present 第一个回答的第四点，我在 Response http headers 里确实是没看到 Access-Control- 这样的返回信息，但根据第五、第六点修改后仍然出错

behavior配置：

public function behaviors()
{
    $behaviors = parent::behaviors();

    // remove authentication filter
    $auth = $behaviors['authenticator'];
    unset($behaviors['authenticator']);

    // add CORS filter
    $behaviors['corsFilter'] = [
        'class' => \yii\filters\Cors::className(),
        'cors' => [
          'Origin' => ['http://localhost:8002'],
          'Access-Control-Request-Method' => ['POST', 'GET', 'PUT'],
          'Access-Control-Request-Headers' => ['*'],
          'Access-Control-Allow-Credentials' => true,
          'Access-Control-Max-Age' => 86400,
        ],
        'actions' => [
          'login' => [
            'Access-Control-Allow-Credentials' => true,
          ]
      ]
    ];


    if (Yii::$app->getRequest()->getMethod() !== 'OPTIONS')
    {
      $behaviors['authenticator'] = [
        'class' => HttpBearerAuth::className(),
        'optional' => [
          'login',
          'signup'
        ],
      ];
    }
    else
    {
      // re-add authentication filter
      $behaviors['authenticator'] = $auth;
      // avoid authentication on CORS-pre-flight requests (HTTP OPTIONS method)
      $behaviors['authenticator']['except'] = ['options'];
    }
    return $behaviors;
}

Nginx 配置：

location / {
    root   c:/localhost/basic/web/;
    index  index.php index.html index.htm;
    try_files $uri $uri/ /index.php?$args;
    add_header Access-Control-Allow-Origin *;
    add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS';
    add_header Access-Control-Allow-Headers 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization';

    if ($request_method = OPTIONS ) {
        add_header Access-Control-Allow-Origin "http://localhost:8002";
        add_header Access-Control-Allow-Methods "*";
        add_header Access-Control-Allow-Headers "X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding";
        add_header Access-Control-Allow-Credentials "true";
        add_header Content-Length 0;
        add_header Content-Type text/plain;
        return 200;
    }
}