// 前端代码示例
fetch('https://api.example.com/data', {
  method: 'GET',
  mode: 'cors', // 明确请求模式
  headers: {
    'Content-Type': 'application/json'
  }
})
.then(response => response.json())
.then(data => console.log(data))
.catch(error => console.error('Error:', error));

Access-Control-Allow-Origin: *
或
Access-Control-Allow-Origin: https://yourdomain.com

// 正确的POST请求示例
fetch('https://api.example.com/data', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({key: 'value'})
})

fetch('https://api.example.com/data', {
  method: 'GET',
  headers: {
    'Content-Type': 'application/json',
    'Authorization': 'Bearer your_token_here'
  }
})

// 正确传递查询参数
fetch('https://api.example.com/data?param1=value1&param2=value2')

fetch('https://api.example.com/data')
  .then(response => {
    if (!response.ok) {
      throw new Error('Network response was not ok');
    }
    return response.json();
  })
  .then(data => console.log(data))
  .catch(error => console.error('Error:', error));