thinkphp用户登录

<?php
namespace app\index\controller;

use think\Controller;
use think\Request;
use app\index\model\User;

class Login extends Controller
{
    public function index()
    {
        return $this->fetch();
    }

    public function doLogin(Request $request)
    {
        $username = $request->param('username');
        $password = $request->param('password');

        $user = User::get(['username' => $username]);
        if ($user && password_verify($password, $user->password)) {
            session('user_id', $user->id);
            return json(['code' => 200, 'msg' => '登录成功']);
        } else {
            return json(['code' => 400, 'msg' => '用户名或密码错误']);
        }
    }

    public function logout()
    {
        session('user_id', null);
        return json(['code' => 200, 'msg' => '退出成功']);
    }
}

<?php
namespace app\index\middleware;

use think\facade\Request;
use think\Response;

class AllowCrossDomain
{
    public function handle($request, \Closure $next)
    {
        header('Access-Control-Allow-Origin: *');
        header('Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS');
        header('Access-Control-Allow-Headers: Content-Type, Authorization');
        if (Request::isOptions()) {
            return Response::create('', '204');
        }
        return $next($request);
    }
}

return [
    \app\index\middleware\AllowCrossDomain::class,
];