分享每一天-fruitcake / laravel-cors 跨域解决包

fruitcake / laravel-cors 跨域解决包

PHP 2349 0 创建时间：2020-09-25 15:24:18

laravel 跨域

#### fruitcake / laravel-cors 跨域解决包

#### 下载安装

```php
composer require fruitcake/laravel-cors
```

如果发生冲突，可能是因为安装了较旧版本的 barryvdh / laravel-cors或fruitcake / laravel-cors。首先删除有冲突的软件包，然后再次尝试安装：
```php
composer remove barryvdh/laravel-cors fruitcake/laravel-cors
composer require fruitcake/laravel-cors
```

#### 发布配置文件

```php
php artisan vendor:publish --tag="cors"
```

自定义header头时，比如：Authorization、Content-type时，要设置allowed_headers来包含这些header信息，也可以设置为[*]以允许所有请求haeder信息
如果要精确设置请求白名单，则必须将白名单包含进allowed_methods所对应的数组
```php
<?php

return [

/*
     * You can enable CORS for 1 or multiple paths.
     * Example: ['api/*']
     */
    'paths' => [],

/*
    * Matches the request method. `[*]` allows all methods.
    */
    'allowed_methods' => ['*'],

/*
     * Matches the request origin. `[*]` allows all origins.
     */
    'allowed_origins' => ['*'],

/*
     * Matches the request origin with, similar to `Request::is()`
     */
    'allowed_origins_patterns' => [],

/*
     * Sets the Access-Control-Allow-Headers response header. `[*]` allows all headers.
     */
    'allowed_headers' => ['*'],

/*
     * Sets the Access-Control-Expose-Headers response header.
     */
    'exposed_headers' => false,

/*
     * Sets the Access-Control-Max-Age response header.
     */
    'max_age' => false,

/*
     * Sets the Access-Control-Allow-Credentials header.
     */
    'supports_credentials' => false,
];
```
allowed_origins allowed_headers 和 allowed_methods可以设置成['*'] 来允许所有值.

允许所有api跨域请求，添加HandleCors中间件到app/Http/Kernel.php的$middleware属性里：
```php
protected $middleware = [
    // ...
    \Fruitcake\Cors\HandleCors::class,
];
```

在$routeMiddleware属性里添加：

```php
protected $routeMiddleware = [
    'cors' => \Fruitcake\Cors\HandleCors::class,
]
```

在 config/app.php 的 providers里添加服务提供者：

```php
'providers' => [
    ...
    Fruitcake\Cors\CorsServiceProvider::class,
]
```
在 routes/api.php里添加路由cors中间件：
```php
Route::middleware('cors')->group(function () {
    Route::get('dashboard', function () {
        return view('dashboard');
    });
});

```

阅读 [BrowserKit](https://symfony.com/components/BrowserKit "BrowserKit") ，[DomCrawler](https://symfony.com/doc/current/components/dom_crawler.html "DomCrawler") 和[ HttpClient](https://symfony.com/doc/current/components/http_client.html " HttpClient") Symfony 组件的文档，以获取有关可以使用Goutte进行操作的更多信息。

#### github地址:
**https://github.com/fruitcake/laravel-cors**

#### 跨源资源共享（CORS）技术文档
https://developer.mozilla.org/zh-CN/docs/Web/HTTP/Access_control_CORS

fruitcake / laravel-cors 跨域解决包

商品推荐

广告推荐

推荐文章