MainelyDesign.com Blog

CORS Middleware in Cakephp 3

Posted on 10/11/2016 at 09:44 pm by Kevin Wentworth
Viewed 9,219 times | 0 comments

I didn't end up needing this (yet) but wanted to post here for future reference. This is CorsMiddleware for CakePHP 3:

// Plugin\src\Middleware\CorsMiddleware.php
 
namespace Plugin\Middleware;
 
class CorsMiddleware
{
    public function __invoke($request, $response, $next)
    {
        // Calling $next() delegates control to the *next* middleware
        // In your application's queue.
        $response = $next($request, $response);
 
        // When modifying the response, you should do it
        // *after* calling next.
        
        // Allow from any origin
        if (isset($_SERVER['HTTP_ORIGIN'])) {
            $response = $response->withHeader('Access-Control-Allow-Origin', $_SERVER['HTTP_ORIGIN'])     // or '*'
                ->withHeader('Access-Control-Allow-Credentials', 'true')
                //->withHeader('Access-Control-Max-Age', '0');    // no cache
                ->withHeader('Access-Control-Max-Age', '86400');    // cache for 1 day
        
        
            // Access-Control headers are received during OPTIONS requests
            if ($_SERVER['REQUEST_METHOD'] == 'OPTIONS') {
            
                if (isset($_SERVER['HTTP_ACCESS_CONTROL_REQUEST_METHOD'])) {
                    $response = $response->withHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS, PUT, DELETE');
                }
                    
            
                if (isset($_SERVER['HTTP_ACCESS_CONTROL_REQUEST_HEADERS'])) {
                    $response = $response->withHeader('Access-Control-Allow-Headers', $_SERVER['HTTP_ACCESS_CONTROL_REQUEST_HEADERS']);
                }
                
                $response = $response->withoutHeader('Location');
                $response = $response->withStatus(200);
                
            }
        }
        
        return $response;
    }
}

And make sure you put this in your plugin bootstrap file.  (If you don't have a plugin you can just add middleware to your App/Application.php file)

Show Plain Text

// Plugin\config\bootstrap.php or App\src\Application.php
 
use Plugin\Middleware\CorsMiddleware;
 
EventManager::instance()->on(
        'Server.buildMiddleware',
        function ($event, $middleware) {
            $middleware->add(new CorsMiddleware());
        });

I started with the code I found here. Please note that this implementation is wide-open and doesn't limit the origin(s) in any way.

Cheers,

-Kevin Wentworth

Recent Posts

Subscribe to my feed

MainelyDesign.com Blog

CORS Middleware in Cakephp 3

Tags for CORS Middleware in Cakephp 3

Comments for this Posting

No comments. Be the first to post a reply.

Sorry, comments are closed for this posting.