EnableCrossRequestMiddleware.php 2.1 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455
  1. <?php
  2. // +----------------------------------------------------------------------
  3. // | Laravel框架 [ Laravel ]
  4. // +----------------------------------------------------------------------
  5. // | 版权所有 2017~2021 Laravel研发中心
  6. // +----------------------------------------------------------------------
  7. // | 官方网站: http://www.laravel.cn
  8. // +----------------------------------------------------------------------
  9. // | Author: wesmiler <12345678@qq.com>
  10. // +----------------------------------------------------------------------
  11. namespace App\Http\Middleware;
  12. use Closure;
  13. use Illuminate\Http\Request;
  14. /**
  15. * 跨域解决方案
  16. * @author wesmiler
  17. * @since 2021/1/10
  18. * Class EnableCrossRequestMiddleware
  19. * @package App\Http\Middleware
  20. */
  21. class EnableCrossRequestMiddleware
  22. {
  23. /**
  24. * Handle an incoming request.
  25. *
  26. * @param \Illuminate\Http\Request $request
  27. * @param \Closure $next
  28. * @return mixed
  29. */
  30. public function handle(Request $request, Closure $next)
  31. {
  32. $response = $next($request);
  33. $origin = $request->server('HTTP_ORIGIN') ? $request->server('HTTP_ORIGIN') : '';
  34. $allow_origin = [
  35. ];
  36. if (empty($allow_origin) || in_array($origin, $allow_origin)) {
  37. //允许所有资源跨域
  38. $response->header('Access-Control-Allow-Origin', '*');
  39. // 允许通过的响应报头
  40. $response->header('Access-Control-Allow-Headers', 'Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN');
  41. // 允许axios获取响应头中的Authorization
  42. $response->header('Access-Control-Expose-Headers', 'Authorization, authenticated');
  43. // 允许的请求方法
  44. $response->header('Access-Control-Allow-Methods', 'GET, POST, PATCH, PUT, OPTIONS, DELETE');
  45. //允许的请求方法
  46. $response->header('Allow', 'GET, POST, PATCH, PUT, OPTIONS, delete');
  47. // 运行客户端携带证书式访问
  48. $response->header('Access-Control-Allow-Credentials', 'true');
  49. }
  50. return $response;
  51. }
  52. }