mirror of
https://git.meshkee.com/cssd/cssd-back.git
synced 2026-10-11 00:41:07 +03:30
31 lines
1019 B
PHP
31 lines
1019 B
PHP
<?php // /app/Http/Middleware/Cors.php
|
|
|
|
namespace App\Http\Middleware;
|
|
|
|
use Closure;
|
|
|
|
class Cors {
|
|
|
|
|
|
|
|
|
|
|
|
public function handle($request, Closure $next)
|
|
|
|
{
|
|
|
|
/* @var $response Response */
|
|
|
|
$response = $next($request)
|
|
|
|
->header('Access-Control-Allow-Origin', '*')
|
|
|
|
->header('Access-Control-Allow-credentials', true)
|
|
|
|
->header('Access-Control-Allow-Methods', 'GET, POST, PUT, DELETE, OPTIONS');
|
|
|
|
if (!$request->isMethod('OPTIONS')) {
|
|
|
|
return $response;
|
|
|
|
}
|
|
|
|
$allow = $response->headers->get('Allow'); // true list of allowed methods
|
|
|
|
if (!$allow) {
|
|
|
|
return $response;
|
|
|
|
}
|
|
|
|
$headers = [
|
|
|
|
'Access-Control-Allow-Methods' => $allow,
|
|
|
|
'Access-Control-Max-Age' => 3600,
|
|
|
|
'Access-Control-Allow-Headers' => 'X-Requested-With, Origin, X-Csrftoken, Content-Type, Accept',
|
|
|
|
];
|
|
|
|
return $response->withHeaders($headers);
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
}
|
|
|