|
|
@@ -36,7 +36,7 @@ class EnableCrossRequestMiddleware
|
|
|
$origin = $request->server('HTTP_ORIGIN') ? $request->server('HTTP_ORIGIN') : '';
|
|
|
$allow_origin = [
|
|
|
];
|
|
|
- /*if (empty($allow_origin) || in_array($origin, $allow_origin)) {
|
|
|
+ if (empty($allow_origin) || in_array($origin, $allow_origin)) {
|
|
|
//允许所有资源跨域
|
|
|
$response->header('Access-Control-Allow-Origin', $origin);
|
|
|
// 允许通过的响应报头
|
|
|
@@ -49,7 +49,7 @@ class EnableCrossRequestMiddleware
|
|
|
$response->header('Allow', 'GET, POST, PATCH, PUT, OPTIONS, delete');
|
|
|
// 运行客户端携带证书式访问
|
|
|
$response->header('Access-Control-Allow-Credentials', 'true');
|
|
|
- }*/
|
|
|
+ }
|
|
|
return $response;
|
|
|
}
|
|
|
}
|