优化结构

internal/server/middleware/cors_identity_test.go

@@ -0,0 +1,12 @@
+package middleware
+
+import (
+	"strings"
+	"testing"
+)
+
+func TestDefaultCORSHeadersDoNotAllowUserIdentityHeader(t *testing.T) {
+	if strings.Contains(strings.ToLower(defaultCORSHeaders), "x-user-id") {
+		t.Fatal("default CORS headers still allow the forgeable x-user-id header")
+	}
+}