前端在axios中配置请求头
axios.defaults.headers.common['token'] = 'aaa111222';
后端设置支持跨域请求头token字段
response.setHeader("Access-Control-Allow-Origin","*");
response.setHeader("Access-Control-Allow-Methods", "POST,GET,OPTIONS,DELETE,HEAD,PUT,PATCH");
response.setHeader("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept, token");
携带token跨域请求成功的案例:

扩展:支持cookie模式
response.setHeader("Access-Control-Allow-Origin","http://www.lihefei.com");
response.setHeader("Access-Control-Allow-Methods", "POST,GET,OPTIONS,DELETE,HEAD,PUT,PATCH");
response.setHeader("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept, token");
response.setHeader("Access-Control-Allow-Credentials","true");