add cors rules

2026-01-09 19:07:51 +05:00
parent 596e14feee
commit 1f61601e05
3 changed files with 11 additions and 7 deletions
@@ -2,15 +2,15 @@

 return [

-    'paths' => ['*'],
+    'paths' => ['api/*', 'sanctum/csrf-cookie'],

-    'allowed_methods' => ['*'],
+    'allowed_methods' => ['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'OPTIONS'],

-    'allowed_origins' => ['*'],
+    'allowed_origins' => [env('APP_URL', 'http://localhost')],

    'allowed_origins_patterns' => [],

-    'allowed_headers' => ['*'],
+    'allowed_headers' => ['Content-Type', 'X-Auth-Token', 'Authorization', 'X-Requested-With'],

    'exposed_headers' => [],