quioteframework/cors

CORS middleware (preflight handling + response headers) for Quiote.

Maintainers

Package info

github.com/quioteframework/cors

Issues

pkg:composer/quioteframework/cors

Transparency log

Statistics

Installs: 14

Dependents: 1

Suggesters: 1

Stars: 0

Security

Advisories: 0

Aikido package health analysis

v3.1.0 2026-07-29 21:28 UTC

Requires

MIT 1d6e9ef0db3f6eea68523fd8e6d0df46c36cc23e

securitycorsquiote

Published on Packagist.org on 2026-07-29 22:09 UTC

This package is auto-updated.

Last update: 2026-07-29 22:09:35 UTC

README

CORS (Cross-Origin Resource Sharing) middleware for Quiote.

Install

composer require quioteframework/cors

Enable

Set cors.enabled to true in your app's settings, plus cors.allowed_origins (a list of origins, or ["*"]). All other keys have sane defaults:

  • cors.allowed_origins — list of allowed origins, or ["*"] (default: [], i.e. nothing allowed)
  • cors.allowed_methods — default GET, POST, PUT, PATCH, DELETE, OPTIONS
  • cors.allowed_headers — default: echoes the preflight's Access-Control-Request-Headers
  • cors.exposed_headers — default: none
  • cors.allow_credentials — default false
  • cors.max_age — preflight cache duration in seconds, default 0 (no caching)

Requests without an Origin header pass through untouched. Preflight (OPTIONS with Access-Control-Request-Method) requests are answered directly with a 204 and never reach the action.

License

MIT. See LICENSE.