|
|
@@ -19,7 +19,9 @@ class CORS
|
|
|
|
|
|
$headers = [
|
|
|
'Access-Control-Allow-Methods'=> 'POST, GET, OPTIONS, PUT, DELETE',
|
|
|
- 'Access-Control-Allow-Headers'=> 'Content-Type, X-Auth-Token, Origin'
|
|
|
+ 'Access-Control-Allow-Headers'=> 'Content-Type, X-Auth-Token, Origin',
|
|
|
+ 'Access-Control-Allow-Origin: *',
|
|
|
+ 'Access-Control-Allow-Credentials', 'false'
|
|
|
];
|
|
|
if($request->getMethod() == "OPTIONS") {
|
|
|
return Response::make('OK', 200, $headers);
|