使用 make:middleware這個 Artisan 命令創建中間件:
php artisan make:middleware CrossHttp
中間件App\Http\Middleware\CrossHttp代碼如下:
<?php namespace App\Http\Middleware; use Closure; class CrossHttp { /** * Handle an incoming request. * * @param \Illuminate\Http\Request $request * @param \Closure $next * @return mixed */ public function handle($request, Closure $next) { $response = $next($request); $response->header('Access-Control-Allow-Origin', '*'); //允許所有資源跨域 $response->header('Access-Control-Allow-Headers', 'Origin, Content-Type, Cookie, Accept, Authorization, application/json , X-Auth-Token');//允許通過的響應報頭 $response->header('Access-Control-Allow-Methods', 'GET, POST, PATCH, PUT, OPTIONS, DELETE');//允許的請求方法 $response->header('Access-Control-Expose-Headers', 'Authorization');//允許axios獲取響應頭中的Authorization $response->header('Allow', 'GET, POST, PATCH, PUT, OPTIONS, delete');//允許的請求方法 $response->header('Access-Control-Allow-Credentials', 'true');//運行客戶端攜帶證書式訪問 return $response; } }
注冊路由,設置中間件保護接口
分別在 protected $middleware 數組中和 protected $routeMiddleware 數組中添加我們剛才創建的那個文件class名, 使用 cors 這個別名。然后在設置它保護 api , 文件地址:\App\Http\Kernel.php
代碼如下:
protected $middlewareGroups = [ 'api' => [ 'cors', ], ]; protected $routeMiddleware = [ 'cors' => \App\Http\Middleware\CrossHttp::class, ];