yii2 restful同一个控制器设置允许认证不允许认证方法，跨域设置

<span style="font-size:18px;"> function behaviors() {          $behaviors = parent::behaviors();          // 当前操作的id          $currentAction = Yii::$app->controller->action->id;          // 需要进行认证的action          $authActions = ['index'];          // 需要进行认证的action就要设置安全认证类          if(in_array($currentAction, $authActions)) {              $behaviors['authenticator'] = [                  'class' => QueryParamAuth::className(),              ];          }          return ArrayHelper::merge([              //设置可以接收访问的域和方法。              [                  'class' => Cors::className(),                  'cors' => [                      'Origin' => ['*'],                      // 'Access-Control-Request-Method' => ['GET', 'HEAD', 'OPTIONS'],                      'Access-Control-Request-Headers' => ['Origin', 'X-Requested-With', 'Content-Type', 'Accept'],                      'Access-Control-Request-Method' => ['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'HEAD', 'OPTIONS'],                  ],              ],          ], $behaviors);        }</span>