ꦫꦣꦺꦤ꧀ꦄꦤ꧀ꦠꦱꦺꦤ

PATH: home / lab2454c / tripvare.com / app / Http / Middleware

<?php

namespace App\Http\Middleware;

use Closure;
use Illuminate\Http\Request;

class Cors
{
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @return mixed
     */
    public function handle(Request $request, Closure $next)
    {
        // return $next($request)
        // ->header('Access-Control-Allow-Origin', "*")
        // ->header('Access-Control-Allow-Methods', "PUT,POST,DELETE,GET,OPTIONS")
        // ->header('Access-Control-Allow-Headers', "Accept,Authorization,Content-Type");
        
        
        header("Access-Control-Allow-Origin: *");

// ALLOW OPTIONS METHOD
        $headers = [
            'Access-Control-Allow-Methods'=> 'POST, GET, OPTIONS, PUT, DELETE',
            'Access-Control-Allow-Headers'=> 'Content-Type, X-Auth-Token, Origin',
        ];
        if($request->getMethod() == "OPTIONS") {
            // The client-side application can set only headers allowed in Access-Control-Allow-Headers
            return Response::make('OK', 200, $headers);
        }

$response = $next($request);
        foreach($headers as $key => $value)
            $response->header($key, $value);
        return $response;
    }
}

[-] TrustProxies.php [edit]
[-] TrimStrings.php [edit]
[+] ..
[-] RedirectIfAuthenticated.php [edit]
[-] AdminAuthenticated.php [edit]
[-] Authenticate.php [edit]
[-] Cors.php [edit]
[-] EncryptCookies.php [edit]
[-] PreventRequestsDuringMaintenance.php [edit]
[-] VerifyCsrfToken.php [edit]
[-] TrustHosts.php [edit]