fix: 开放click-stats接口权限 + 添加生产环境CORS

Author: Layau-code

src/main/java/com/layor/tinyflow/config/SecurityConfig.java

@@ -58,6 +58,7 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Excepti
                                 "/api/redirect/**",       // 短链跳转（核心功能）
                                 "/api/shorten",           // 创建短链（允许匿名）
                                 "/api/urls",              // 查询短链列表（允许匿名）
+                                "/api/urls/click-stats",  // 点击统计（允许匿名）
                                 "/api/stats/**",          // 统计接口（允许匿名）
                                 "/actuator/**",           // 监控端点
                                 "/error",                 // 错误页面
@@ -97,7 +98,12 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Excepti
     @Bean
     public CorsConfigurationSource corsConfigurationSource() {
         CorsConfiguration configuration = new CorsConfiguration();
-        configuration.setAllowedOrigins(List.of("http://localhost:5173", "http://localhost:5174", "http://localhost:8080"));
+        configuration.setAllowedOrigins(List.of(
+                "http://localhost:5173", 
+                "http://localhost:5174", 
+                "http://localhost:8080",
+                "http://47.97.110.128"
+        ));
         configuration.setAllowedMethods(List.of("GET", "POST", "PUT", "DELETE", "OPTIONS"));
         configuration.setAllowedHeaders(List.of("*"));
         configuration.setAllowCredentials(true);

web/src/style.css

@@ -58,6 +58,9 @@ html, body {
 }
 
 .fs-btn-primary {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
   background: var(--tf-brand-primary);
   color: #fff;
   border: none;
@@ -67,6 +70,7 @@ html, body {
   font-weight: 500;
   cursor: pointer;
   transition: all 0.2s ease;
+  line-height: 1;
 }
 .fs-btn-primary:hover {
   background: var(--tf-brand-hover);