xtu_mall/app/api/middleware.php

<?php
return [
    \app\common\middleware\AllowCrossDomain::class,
];