docs: function cors(req, res) {
    const { origin } = req.headers;
    res.set('Access-Control-Allow-Origin', origin); // 注意这里不能使用* ,否则请求include时候报错
    res.set('Access-Control-Allow-Headers', 'Origin, X-Requested-With, Content-Type, Accept,Content-Range, Content-Disposition, Content-Description,Set-Cookie,, Access-Control-Request-Method, Access-Control-Request-Headers,Authorization,Authentication');
    res.set('Access-Control-Allow-Credentials', true); // 告诉客户端可以在HTTP请求中带上Cookie
    res.set('Access-Control-Allow-Methods', 'GET,POST,PUT,DELETE,PATCH,HEAD,OPTIONS');
    res.set('Access-Control-Expose-Headers', 'Set-Cookie,Authorization,Authentication');
  }