Lument 5.4用来做api服务,但js在跨域调用时会先发送options类型的请求,这时lumen就会返回405。
Lumen 5.4本身不支持options请求,在Providers中,使用$request->getMethod()得到的永远是GET,那么目前可以做的是就是建个中间件来人工解决,正好写了一个Cors中间件,用来加跨域头的,而且是全局都要用的,就在捕获处理。
代码如下:
/**
* CORS route Middleware.
*/
namespace App\Http\Middleware;
use Closure;
use Illuminate\Http\Response;
class CORSMiddleware
{
private $headers;
private $allow_origin;
/**
* Handle an incoming request.
*
* @param \Illuminate\Http\Request $request
* @param \Closure $next
* @return mixed
*/
public function handle($request, Closure $next)
{
$this->headers = [
'Access-Control-Allow-Origin' => '*',
'Access-Control-Allow-Methods'=> 'POST, GET, OPTIONS, PUT, DELETE',
'Access-Control-Allow-Headers'=> 'Content-Type, X-Auth-Token, Origin',
//'Access-Control-Allow-Credentials' => 'true',//允许客户端发送cookie
'Expires' =>'Mon, 26 Jul 1997 05:00:00 GMT',
'Last-Modified'=> gmdate("D, d M Y H:i:s") . " GMT",
'Cache-Control' => 'no-cache, must-revalidate',
'Pragma' => 'no-cache',
];
$this->allow_origin = [
'http://localhost',
'http://192.168.1.12:8080'
];
$origin = isset($_SERVER['HTTP_ORIGIN']) ? $_SERVER['HTTP_ORIGIN'] : '';
// //如果origin不在允许列表内,直接返回403
// if (!in_array($origin, $this->allow_origin) && !empty($origin))
// return new Response('Forbidden', 403);
if($request->getMethod() == "OPTIONS") {
//return Response::make('OK', 200, $this->headers);
$response = new Response('OK', 200);
foreach ($this->headers as $key => $value) {
$response->header($key, $value);
}
return $response;
}
$response = $next($request);
foreach($this->headers as $key => $value)
$response->header($key, $value);
return $response;
}
}
-完-