12345678910111213141516171819202122232425262728293031323334 |
- <?php
- namespace App\Http\Middleware;
- use Closure;
- class EnableCrossRequestMiddleware
- {
- /**
- * 跨域中间件
- * Handle an incoming request.
- *
- * @param \Illuminate\Http\Request $request
- * @param \Closure $next
- * @return mixed
- */
- public function handle($request, Closure $next)
- {
- $response = $next($request);
- $origin = $request->server('HTTP_ORIGIN') ? $request->server('HTTP_ORIGIN') : '';
- $allow_origin = [
- 'http://127.0.0.1:8080',//允许访问
- ];
- if (in_array($origin, $allow_origin)) {
- $response->header('Access-Control-Allow-Origin', $origin);
- $response->header('Access-Control-Allow-Headers', 'Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN');
- $response->header('Access-Control-Expose-Headers', 'Authorization, authenticated');
- $response->header('Access-Control-Allow-Methods', 'GET, POST, PATCH, PUT, OPTIONS');
- $response->header('Access-Control-Allow-Credentials', 'true');
- }
- return $response;
- }
- }
|