From e8e69b91ac9fabab788b10b934da2b60d48127cb Mon Sep 17 00:00:00 2001
From: Baoshuo <i@baoshuo.ren>
Date: Tue, 15 Sep 2026 19:53:42 +0800
Subject: [PATCH] framework: fix vary header

---
 framework/framework/base.ts   | 1 +
 framework/framework/server.ts | 4 ++--
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/framework/framework/base.ts b/framework/framework/base.ts
index a70f62574c..5fdd935d18 100644
--- a/framework/framework/base.ts
+++ b/framework/framework/base.ts
@@ -125,6 +125,7 @@ export default (logger, xff, xhost) => async (ctx: KoaContext, next: Next) => {
         }
     } finally {
         if (!request.websocket) {
+            if (ctx.handler) ctx.vary('Accept');
             if (response.etag && request.headers['if-none-match'] === response.etag) {
                 ctx.response.status = 304;
             } else if (response.redirect && !request.json) {
diff --git a/framework/framework/server.ts b/framework/framework/server.ts
index f168e88a24..42ec1b816a 100644
--- a/framework/framework/server.ts
+++ b/framework/framework/server.ts
@@ -401,9 +401,9 @@ export class WebService extends Service<never> {
                         c.set('Access-Control-Allow-Headers', corsAllowHeaders);
                         if (c.request.headers.origin) {
                             c.set('Access-Control-Allow-Origin', c.request.headers.origin);
-                            c.set('Vary', 'Origin');
+                            c.vary('Origin');
                         } else {
-                            c.set('Vary', 'Referer');
+                            c.vary('Referer');
                         }
                         c.cors = true;
                     }