Setup and manage Cross-Origin Resource Sharing headers in October CMS
This plugin is based on https://github.com/barryvdh/laravel-cors.
All configuration for the plugin can be done via the backend settings.
The following cors headers are supported:
Currently these headers are sent for every request. There is no per-route configuration possible at this time.
After installing the plugin visit the CORS settings page in your October CMS backend settings.
You can add
* as an entry to
Allowed headers and
Allowed methods to allow any kind of CORS request from everywhere.
It is advised to be more explicit about these settings. You can add values for each header via the repeater fields.
It is important to set these intial settings once for the plugin to work as excpected!
As an alternative to the backend settings you can create a
config/config.php file in the plugins root directory to configure it.
The filesystem configuration will overwrite any defined backend setting.
<?php // plugins/offline/cors/config/config.php return [ 'supportsCredentials' => true, 'maxAge' => 3600, 'allowedOrigins' => ['*'], 'allowedHeaders' => ['*'], 'allowedMethods' => ['GET', 'POST'], 'exposedHeaders' => [''], ];