EnableCrossRequestMiddleware.php 1.1 KB

12345678910111213141516171819202122232425262728293031323334
  1. <?php
  2. namespace App\Http\Middleware;
  3. use Closure;
  4. class EnableCrossRequestMiddleware
  5. {
  6. /**
  7. * 跨域中间件
  8. * Handle an incoming request.
  9. *
  10. * @param \Illuminate\Http\Request $request
  11. * @param \Closure $next
  12. * @return mixed
  13. */
  14. public function handle($request, Closure $next)
  15. {
  16. $response = $next($request);
  17. $origin = $request->server('HTTP_ORIGIN') ? $request->server('HTTP_ORIGIN') : '';
  18. $allow_origin = [
  19. 'http://127.0.0.1:8080',//允许访问
  20. ];
  21. if (in_array($origin, $allow_origin)) {
  22. $response->header('Access-Control-Allow-Origin', $origin);
  23. $response->header('Access-Control-Allow-Headers', 'Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN');
  24. $response->header('Access-Control-Expose-Headers', 'Authorization, authenticated');
  25. $response->header('Access-Control-Allow-Methods', 'GET, POST, PATCH, PUT, OPTIONS');
  26. $response->header('Access-Control-Allow-Credentials', 'true');
  27. }
  28. return $response;
  29. }
  30. }