HOME

<?php


namespace App\Http\Middleware;


use Closure;


class CorsMiddleware {

    public function handle($request, Closure $next) {
        $response = $next($request);
        $response->headers->set('Access-Control-Allow-Origin', '*'); // permite todas las origenes
        $response->headers->set('Access-Control-Allow-Methods', 'GET, POST, PUT, DELETE, OPTIONS'); // permite estos metodos
        $response->headers->set('Access-Control-Allow-Headers', 'X-Requested-With, Content-Type, X-Token-Auth, Authorization'); // permite estos headers

        return $response;
    }

}