How to enable CORS in Laravel?

Question

I am in Laravel 5.8 - I kept getting this CORS issue

I've tried

php artisan make:middleware Cors

Add these code

<?php
namespace App\Http\Middleware;
use Closure;
class Cors
{
  public function handle($request, Closure $next)
  {
    return $next($request)
      ->header(‘Access-Control-Allow-Origin’, ‘*’)
      ->header(‘Access-Control-Allow-Methods’, ‘GET, POST, PUT, DELETE, OPTIONS’)
      ->header(‘Access-Control-Allow-Headers’, ‘X-Requested-With, Content-Type, X-Token-Auth, Authorization’);
  }
}

restart my local Apache 2 sudo apachectl -k restart

Open up app/Http/Kernel.php - added this 1 line

protected $routeMiddleware = [
        'auth' => \Illuminate\Auth\Middleware\Authenticate::class,
        'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class,
        'bindings' => \Illuminate\Routing\Middleware\SubstituteBindings::class,
        'can' => \Illuminate\Auth\Middleware\Authorize::class,
        'guest' => \App\Http\Middleware\RedirectIfAuthenticated::class,
        'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class,
        'admin' => \App\Http\Middleware\AdminMiddleware::class,
        'dev' => \App\Http\Middleware\DevMiddleware::class,
        'cors' => \App\Http\Middleware\Cors::class, <----- 
    ];

refresh the site, go to console, still see the same CORS issue

How would one go about and debug this further?

Have you applied the middleware to the route in the routes file? — ceejayoz, Mar 25 '19 at 20:55
instead of $routeMiddleware put it in $middleware which runs during every request to your application — Nishant, Apr 09 '21 at 07:07

score 11 · Accepted Answer · answered Mar 25 '19 at 21:46

11

Try laravel-cors package that allows you to send Cross-Origin Resource Sharing headers with Laravel middleware configuration.

answered Mar 25 '19 at 21:46

ArtemSky

1,173
11
20

3

I had the same issue and this package didn't do it for me but this did [laravel-cors](https://github.com/spatie/laravel-cors). Hope this helps someone. – Eric McWinNEr Aug 08 '19 at 21:34
@S.Sid Glad I could help. – Eric McWinNEr Oct 09 '19 at 22:30
nothing works for me((( I already added headers manually in bootstrap/app.php and see this headers in postman, but it still not works((((( – Denys Siebov Jan 27 '20 at 15:12
@denys Siebov let me know if something works for you as I am facing the same problem and above mentioned solutions dont work – Ankit Sep 01 '23 at 17:32

score 7 · Answer 2 · edited Feb 01 '21 at 09:36

First solution

Try to set the CORS middleware as a global middleware.

the handle function in the CORS middleware:

 public function handle($request, Closure $next)
 {
  return $next($request)
   ->header('Access-Control-Allow-Origin', '*')
   ->header('Access-Control-Allow-Methods', 'GET, POST, PUT, PATCH, DELETE, OPTIONS')
   ->header('Access-Control-Allow-Headers', 'Content-Type, Authorization');
 }

to add this middleware globally, go to App\Http\Kernel, and add this line in the $middleware array:

\App\Http\Middleware\Cors::class,

Second solution

you can also add this code in the bootstrap/app.php

header('Access-Control-Allow-Origin', '*');
header('Access-Control-Allow-Methods', 'GET, POST, PUT, PATCH, DELETE, OPTIONS');
header('Access-Control-Allow-Headers', 'Content-Type, Authorization');

hope it works!

I put this lines at bottom of these files, cache cleared, but block persist — Alejandro Beltran, Jun 08 '21 at 19:56

score 4 · Answer 3 · answered May 20 '22 at 19:34

4

Since Nov 10, 2020 Laravel add build-in configuration for this, you can find it in config/cors.php, look at https://github.com/laravel/laravel/blob/9.x/config/cors.php

answered May 20 '22 at 19:34

AnasSafi

5,353
1
35
38

score 2 · Answer 4 · answered Oct 14 '20 at 00:20

Add below to you .htaccess (just add to the destination site and origin site)

Header always set Access-Control-Allow-Origin "*"
Header always set Access-Control-Allow-Methods "POST, GET, OPTIONS, DELETE, PUT"
Header always set Access-Control-Max-Age "1000"
Header always set Access-Control-Allow-Headers "x-requested-with, Content-Type, origin, authorization, accept, client-security-token"

RewriteEngine On
RewriteCond %{REQUEST_METHOD} OPTIONS
RewriteRule ^(.*)$ $1 [R=200,L]

Hope it saves someone time, happy coding!!!

How to enable CORS in Laravel?

4 Answers4

First solution

Second solution

Linked

Related