fix cors

2026-10-10 19:41:07 +03:30 · 2023-09-19 13:46:34 +03:30
parent 18ddfce1ec
commit f372b8672d
3 changed files with 31 additions and 28 deletions
@@ -1,30 +1,32 @@
-<?php // /app/Http/Middleware/Cors.php
-namespace App\Http\Middleware;
-use Closure;
-class Cors {
+<?php
+
+    namespace App\Http\Middleware;
+
+    use Closure;
+
+    class Cors {


-    public function handle($request, Closure $next)
-    {
-        /* @var $response Response */
-        $response = $next($request)
-        ->header('Access-Control-Allow-Origin', '*')
-        ->header('Access-Control-Allow-credentials', true)
-        ->header('Access-Control-Allow-Methods', 'GET, POST, PUT, DELETE, OPTIONS');
-        if (!$request->isMethod('OPTIONS')) {
-            return $response;
+        public function handle($request, Closure $next)
+        {
+            /* @var $response Response */
+            $response = $next($request)
+            ->header('Access-Control-Allow-Origin', '*')
+            ->header('Access-Control-Allow-credentials', true)
+            ->header('Access-Control-Allow-Methods', 'GET, POST, PUT, DELETE, OPTIONS');
+            if (!$request->isMethod('OPTIONS')) {
+                return $response;
+            }
+            $allow = $response->headers->get('Allow'); // true list of allowed methods
+            if (!$allow) {
+                return $response;
+            }
+            $headers = [
+                'Access-Control-Allow-Methods' => $allow,
+                'Access-Control-Max-Age' => 3600,
+                'Access-Control-Allow-Headers' => 'X-Requested-With, Origin, X-Csrftoken, Content-Type, Accept',
+            ];
+            return $response->withHeaders($headers);
        }
-        $allow = $response->headers->get('Allow'); // true list of allowed methods
-        if (!$allow) {
-            return $response;
-        }
-        $headers = [
-            'Access-Control-Allow-Methods' => $allow,
-            'Access-Control-Max-Age' => 3600,
-            'Access-Control-Allow-Headers' => 'X-Requested-With, Origin, X-Csrftoken, Content-Type, Accept',
-        ];
-        return $response->withHeaders($headers);
+
    }
-
-
-}