Commit acb9a1ac authored by Emiliano Balbuena's avatar Emiliano Balbuena

(fix): Scheme not being set on CORS origin header

1 merge request!308WIP: (feat): Minds Pro
Pipeline #80775115 failed with stages
in 4 minutes and 11 seconds
......@@ -57,6 +57,7 @@ class ProMiddleware implements RouterMiddleware
{
$serverParams = $request->getServerParams() ?? [];
$scheme = $request->getUri()->getScheme();
$host = parse_url($serverParams['HTTP_ORIGIN'] ?? '', PHP_URL_HOST) ?: $serverParams['HTTP_HOST'];
if (!$host) {
......@@ -69,7 +70,7 @@ class ProMiddleware implements RouterMiddleware
return;
}
header(sprintf("Access-Control-Allow-Origin: %s", $host));
header(sprintf("Access-Control-Allow-Origin: %s://%s", $scheme, $host));
header('Access-Control-Allow-Credentials: true');
header('Access-Control-Max-Age: 86400');
header('Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS');
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment