//1、定义跨越名称
private const string DefaultCorsPolicyName = "Default";
//2、在 ConfigureServices 使用
ConfigureCors(context, configuration);
//3、在OnApplicationInitialization 里面 app.UseRouting()之后 app.UseAuthentication()之前配置
app.UseCors(DefaultCorsPolicyName);

private void ConfigureCors(ServiceConfigurationContext context, IConfiguration configuration)
    {
        context.Services.AddCors(options =>
        {
            options.AddPolicy(DefaultCorsPolicyName, builder =>
            {
                builder
                    .WithOrigins(
                        configuration["App:CorsOrigins"]
                            .Split(",", StringSplitOptions.RemoveEmptyEntries)
                            .Select(o => o.RemovePostFix("/"))
                            .ToArray()
                    )
                    .WithAbpExposedHeaders()
                    .SetIsOriginAllowedToAllowWildcardSubdomains()
                    .AllowAnyHeader()
                    .AllowAnyMethod()
                    .AllowCredentials();
            });
        });
    }