75 lines
2.1 KiB
PHP
75 lines
2.1 KiB
PHP
<?php
|
|
|
|
namespace OFFLINE\CORS\Classes;
|
|
|
|
use Closure;
|
|
use Illuminate\Contracts\Http\Kernel;
|
|
use Illuminate\Routing\Router;
|
|
|
|
class HandlePreflight
|
|
{
|
|
/**
|
|
* @param CorsService $cors
|
|
*/
|
|
public function __construct(CorsService $cors, Router $router, Kernel $kernel)
|
|
{
|
|
$this->cors = $cors;
|
|
$this->router = $router;
|
|
$this->kernel = $kernel;
|
|
}
|
|
|
|
/**
|
|
* Handle an incoming OPTIONS request.
|
|
*
|
|
* @param \Illuminate\Http\Request $request
|
|
* @param \Closure $next
|
|
*
|
|
* @return mixed
|
|
*/
|
|
public function handle($request, Closure $next)
|
|
{
|
|
$response = $next($request);
|
|
if ($this->cors->isPreflightRequest($request) && $this->hasMatchingCorsRoute($request)) {
|
|
$preflight = $this->cors->handlePreflightRequest($request);
|
|
$response->headers->add($preflight->headers->all());
|
|
}
|
|
$response->setStatusCode(204);
|
|
return $response;
|
|
}
|
|
|
|
/**
|
|
* Verify the current OPTIONS request matches a CORS-enabled route
|
|
*
|
|
* @param \Illuminate\Http\Request $request
|
|
*
|
|
* @return boolean
|
|
*/
|
|
private function hasMatchingCorsRoute($request)
|
|
{
|
|
// Check if CORS is added in a global middleware
|
|
if ($this->kernel->hasMiddleware(HandleCors::class)) {
|
|
return true;
|
|
}
|
|
|
|
// Check if CORS is added as a route middleware
|
|
$request = clone $request;
|
|
$request->setMethod($request->header('Access-Control-Request-Method'));
|
|
|
|
try {
|
|
$route = $this->router->getRoutes()->match($request);
|
|
// change of method name in laravel 5.3
|
|
if (method_exists($this->router, 'gatherRouteMiddleware')) {
|
|
$middleware = $this->router->gatherRouteMiddleware($route);
|
|
} else {
|
|
$middleware = $this->router->gatherRouteMiddlewares($route);
|
|
}
|
|
|
|
return in_array(HandleCors::class, $middleware);
|
|
} catch (\Exception $e) {
|
|
app('log')->error($e);
|
|
|
|
return false;
|
|
}
|
|
}
|
|
}
|