开启跨域支持

response->setHeader("Access-Control-Allow-Methods", "PUT, GET, HEAD, POST, DELETE, OPTIONS"); $this->response->setHeader("Access-Control-Allow-Headers", "X-Requested-With,X-PDD-PageCode,X-PDD-Pati,X-Ay-Uid,X-From-App,Content-Type,X-PDD-VerifyAuthToken"); $this->response->setHeader("Access-Control-Allow-Credentials", "true"); } }"> response->setHeader("Access-Control-Allow-Methods", "PUT, GET, HEAD, POST, DELETE, OPTIONS"); $this->response->setHeader("Access-Control-Allow-Headers", "X-Requested-With,X-PDD-PageCode,X-PDD-Pati,X-Ay-Uid,X-From-App,Content-Type,X-PDD-VerifyAuthToken"); $this->response->setHeader("Access-Control-Allow-Credentials", "true"); } }"> response->setHeader("Access-Control-Allow-Methods", "PUT, GET, HEAD, POST, DELETE, OPTIONS"); $this->response->setHeader("Access-Control-Allow-Headers", "X-Requested-With,X-PDD-PageCode,X-PDD-Pati,X-Ay-Uid,X-From-App,Content-Type,X-PDD-VerifyAuthToken"); $this->response->setHeader("Access-Control-Allow-Credentials", "true"); } }">

use Phalcon\\Http\\Request;

class CallbackController extends BaseController
{
	private function item1688LightAppCallback($url, $aliId, $refreshToken)
	{
				$this->response->setHeader("Access-Control-Allow-Origin", "<https://page.1688.com>");
        $this->response->setHeader("Access-Control-Allow-Methods", "PUT, GET, HEAD, POST, DELETE, OPTIONS");
        $this->response->setHeader("Access-Control-Allow-Headers", "X-Requested-With,X-PDD-PageCode,X-PDD-Pati,X-Ay-Uid,X-From-App,Content-Type,X-PDD-VerifyAuthToken");
        $this->response->setHeader("Access-Control-Allow-Credentials", "true");

	}
}