AllowCrossDomain.php 627 B

1234567891011121314151617181920
  1. <?php
  2. declare(strict_types=1);
  3. namespace app\api\middleware;
  4. class AllowCrossDomain{
  5. public function handle($request, \Closure $next)
  6. {
  7. header('Access-Control-Allow-Origin: *'); // 或者指定具体域名
  8. header('Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS');
  9. header('Access-Control-Allow-Headers: Content-Type, Authorization, X-Requested-With');
  10. header('Access-Control-Allow-Credentials: true');
  11. if ($request->method() === 'OPTIONS') {
  12. return response()->code(204);
  13. }
  14. return $next($request);
  15. }
  16. }