使用 make:middleware这个 Artisan 命令创建中间件:
php artisan make:middleware CrossHttp
中间件App\Http\Middleware\CrossHttp代码如下:
<?php namespace App\Http\Middleware; use Closure; class CrossHttp { /** * Handle an incoming request. * * @param \Illuminate\Http\Request $request * @param \Closure $next * @return mixed */ public function handle($request, Closure $next) { $response = $next($request); $response->header('Access-Control-Allow-Origin', '*'); //允许所有资源跨域 $response->header('Access-Control-Allow-Headers', 'Origin, Content-Type, Cookie, Accept, Authorization, application/json , X-Auth-Token');//允许通过的响应报头 $response->header('Access-Control-Allow-Methods', 'GET, POST, PATCH, PUT, OPTIONS, DELETE');//允许的请求方法 $response->header('Access-Control-Expose-Headers', 'Authorization');//允许axios获取响应头中的Authorization $response->header('Allow', 'GET, POST, PATCH, PUT, OPTIONS, delete');//允许的请求方法 $response->header('Access-Control-Allow-Credentials', 'true');//运行客户端携带证书式访问 return $response; } }
注册路由,设置中间件保护接口
分别在 protected $middleware 数组中和 protected $routeMiddleware 数组中添加我们刚才创建的那个文件class名, 使用 cors 这个别名。然后在设置它保护 api , 文件地址:\App\Http\Kernel.php
代码如下:
protected $middlewareGroups = [ 'api' => [ 'cors', ], ]; protected $routeMiddleware = [ 'cors' => \App\Http\Middleware\CrossHttp::class, ];