Laravel8,TP5跨域问题解决

问题抛出

我们在用进行开发的时候，特别是前后端完全分离的时候，由于前端项目运行在自己机器的指定端口 (也可能是其他人的机器) ， 例如 localhost:8000 , 而 laravel 程序又运行在另一个端口，这样就跨域了，而由于浏览器的同源策略，跨域请求是非法的。其实这个问题很好解决，只需要添加一个中间件就可以了。

解决办法

利用中间件在返回的响应中添加 Allow-Origin: *允许所有来源访问
TP

php think make:middleware EnableCorsMiddleWare
###此命令会在app/http/middleware下生成一个中间件文件
####添加以下代码

public function handle($request, \Closure $next)  
{  
 header('Access-Control-Allow-Origin: *');  
  header('Access-Control-Allow-Headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-Requested-With');  
  header('Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE');  
  header('Access-Control-Max-Age: 1728000');  
 if (strtoupper($request->method()) == "OPTIONS") {  
 json()->send();  
 die;  }  
  
  return $next($request);  
}

同时在app\admin\middleware.php下添加
return [  
 \app\http\middleware\CrossDomain::class  
];

Laravel8

### 创建中间件
php artisan make:middleware  EnableCorsMiddleWare
###将会在app\http\MiddleWarec创建EnableCorsMiddleWare.php
###在EnableCorsMiddleWare.php中添加以下代码
public function handle(Request $request, Closure $next)  
{  
 header('Access-Control-Allow-Origin: *');  
  header("Access-Control-Allow-Credentials: true");  
  header("Access-Control-Allow-Methods: *");  
  header("Access-Control-Allow-Headers: Content-Type,Access-Token,Appid,Secret,Authorization");  
  header("Access-Control-Expose-Headers: *");  
 return $next($request);  
  
}
###同时在内核中注册全局的中间件，以便每次请求都经过此中间件的处理，
###在App\Http\Kernel.php添加所注册的中间件
  protected $middleware = [  
  // \App\Http\Middleware\TrustHosts::class,  
  \App\Http\Middleware\TrustProxies::class,  
//        \Fruitcake\Cors\HandleCors::class,  
  \App\Http\Middleware\PreventRequestsDuringMaintenance::class,  
  \Illuminate\Foundation\Http\Middleware\ValidatePostSize::class,  
  \App\Http\Middleware\TrimStrings::class,  
  \Illuminate\Foundation\Http\Middleware\ConvertEmptyStringsToNull::class,  
  \App\Http\Middleware\EnablecrossRequestMiddleware::class,  
  ];
  ###同时需要将\Fruitcake\Cors\HandleCors::class,注释掉，否则会出现
  # The 'Access-Control-Allow-Origin' header contains multiple values'x, *', but only one is allowed的错误，此问题的出现是因为多次设置Allow-Origin导致的。