server/src/config/cors.php
author ymh <ymh.work@gmail.com>
Wed, 09 Nov 2016 15:05:41 +0100
changeset 406 cf0f23803a53
parent 107 16e1473a6a99
permissions -rw-r--r--
upgrade elasticsearch to 5.0, upgrade ember
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
107
16e1473a6a99 add cors support for api
ymh <ymh.work@gmail.com>
parents:
diff changeset
     1
<?php
16e1473a6a99 add cors support for api
ymh <ymh.work@gmail.com>
parents:
diff changeset
     2
16e1473a6a99 add cors support for api
ymh <ymh.work@gmail.com>
parents:
diff changeset
     3
return [
16e1473a6a99 add cors support for api
ymh <ymh.work@gmail.com>
parents:
diff changeset
     4
    /*
16e1473a6a99 add cors support for api
ymh <ymh.work@gmail.com>
parents:
diff changeset
     5
     |--------------------------------------------------------------------------
16e1473a6a99 add cors support for api
ymh <ymh.work@gmail.com>
parents:
diff changeset
     6
     | Laravel CORS
16e1473a6a99 add cors support for api
ymh <ymh.work@gmail.com>
parents:
diff changeset
     7
     |--------------------------------------------------------------------------
16e1473a6a99 add cors support for api
ymh <ymh.work@gmail.com>
parents:
diff changeset
     8
     |
16e1473a6a99 add cors support for api
ymh <ymh.work@gmail.com>
parents:
diff changeset
     9
16e1473a6a99 add cors support for api
ymh <ymh.work@gmail.com>
parents:
diff changeset
    10
     | allowedOrigins, allowedHeaders and allowedMethods can be set to array('*')
16e1473a6a99 add cors support for api
ymh <ymh.work@gmail.com>
parents:
diff changeset
    11
     | to accept any value, the allowed methods however have to be explicitly listed.
16e1473a6a99 add cors support for api
ymh <ymh.work@gmail.com>
parents:
diff changeset
    12
     |
16e1473a6a99 add cors support for api
ymh <ymh.work@gmail.com>
parents:
diff changeset
    13
     */
16e1473a6a99 add cors support for api
ymh <ymh.work@gmail.com>
parents:
diff changeset
    14
    'supportsCredentials' => false,
16e1473a6a99 add cors support for api
ymh <ymh.work@gmail.com>
parents:
diff changeset
    15
    'allowedOrigins' => ['*'],
16e1473a6a99 add cors support for api
ymh <ymh.work@gmail.com>
parents:
diff changeset
    16
    'allowedHeaders' => ['*'],
16e1473a6a99 add cors support for api
ymh <ymh.work@gmail.com>
parents:
diff changeset
    17
    'allowedMethods' => ['GET',],
16e1473a6a99 add cors support for api
ymh <ymh.work@gmail.com>
parents:
diff changeset
    18
    'exposedHeaders' => [],
16e1473a6a99 add cors support for api
ymh <ymh.work@gmail.com>
parents:
diff changeset
    19
    'maxAge' => 0,
16e1473a6a99 add cors support for api
ymh <ymh.work@gmail.com>
parents:
diff changeset
    20
    'hosts' => [],
16e1473a6a99 add cors support for api
ymh <ymh.work@gmail.com>
parents:
diff changeset
    21
];