From 6310624c428850640454d5422315b5b20174a2cb Mon Sep 17 00:00:00 2001
From: sungw <sungw@qq.com>
Date: Tue, 21 Oct 2025 11:06:48 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20=E4=BF=AE=E5=A4=8DAPI=E5=93=8D=E5=BA=94?=
 =?UTF-8?q?=E5=8A=A0=E5=AF=86=E6=97=B6=E6=B7=BB=E5=8A=A0=E5=8A=A0=E5=AF=86?=
 =?UTF-8?q?=20header=20=E6=A0=87=E8=AF=86=E4=B8=8D=E7=94=9F=E6=95=88?=
 =?UTF-8?q?=E7=9A=84=E9=97=AE=E9=A2=98?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../encrypt/core/filter/ApiEncryptResponseWrapper.java      | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/yudao-framework/yudao-spring-boot-starter-web/src/main/java/cn/iocoder/yudao/framework/encrypt/core/filter/ApiEncryptResponseWrapper.java b/yudao-framework/yudao-spring-boot-starter-web/src/main/java/cn/iocoder/yudao/framework/encrypt/core/filter/ApiEncryptResponseWrapper.java
index fed38917b9..194e525c28 100644
--- a/yudao-framework/yudao-spring-boot-starter-web/src/main/java/cn/iocoder/yudao/framework/encrypt/core/filter/ApiEncryptResponseWrapper.java
+++ b/yudao-framework/yudao-spring-boot-starter-web/src/main/java/cn/iocoder/yudao/framework/encrypt/core/filter/ApiEncryptResponseWrapper.java
@@ -45,12 +45,14 @@ public class ApiEncryptResponseWrapper extends HttpServletResponseWrapper {
         // 2. 加密 body
         String encryptedBody = symmetricEncryptor != null ? symmetricEncryptor.encryptBase64(body)
                 : asymmetricEncryptor.encryptBase64(body, KeyType.PublicKey);
-        response.getWriter().write(encryptedBody);
 
-        // 3. 添加加密 header 标识
+        // 3. 添加加密 header 标识（设置header要放在response的write之前）
         this.addHeader(properties.getHeader(), "true");
         // 特殊：特殊：https://juejin.cn/post/6867327674675625992
         this.addHeader("Access-Control-Expose-Headers", properties.getHeader());
+
+        // 4. 输出加密后的 body
+        response.getWriter().write(encryptedBody);
     }
 
     @Override