From 98188de8fd3ac3a7bcd5742afa0e62b4ccb4073e Mon Sep 17 00:00:00 2001 From: roxblnfk Date: Sun, 5 May 2024 17:21:05 +0400 Subject: [PATCH] Frontend: add CORS middleware --- src/Application.php | 1 + src/Sender/Frontend/Http/Cors.php | 29 +++++++++++++++++++++++++++++ 2 files changed, 30 insertions(+) create mode 100644 src/Sender/Frontend/Http/Cors.php diff --git a/src/Application.php b/src/Application.php index 7b0b29fc..1cf8faa1 100644 --- a/src/Application.php +++ b/src/Application.php @@ -205,6 +205,7 @@ public function configureFrontend(int $port): void $inspector = $this->container->make(Inspector::class, [ new Traffic\Dispatcher\Http( [ + new Sender\Frontend\Http\Cors(), new Sender\Frontend\Http\StaticFiles(), new Sender\Frontend\Http\EventAssets($this->logger, $wsSender->getEventStorage()), new Sender\Frontend\Http\Router($this->logger, $wsSender->getEventStorage()), diff --git a/src/Sender/Frontend/Http/Cors.php b/src/Sender/Frontend/Http/Cors.php new file mode 100644 index 00000000..ac5a0c86 --- /dev/null +++ b/src/Sender/Frontend/Http/Cors.php @@ -0,0 +1,29 @@ +getMethod() === 'OPTIONS' + ? new Response(200) + : $next($request); + + return $response + ->withHeader('Access-Control-Allow-Origin', '*') + ->withHeader('Access-Control-Allow-Headers', '*') + ->withHeader('Access-Control-Allow-Methods', 'GET, POST, PUT, DELETE, OPTIONS'); + } +}