Cors should respect the .env var for CORS domains

2022-02-20 12:22:18 -08:00
parent 6ef053bc52
commit cd2c92fd6c
1 changed files with 5 additions and 1 deletions
@@ -1,10 +1,14 @@
 <?php

+$allowed_origins = env('CORS_ALLOWED_ORIGINS') !== null ?
+    explode(',', env('CORS_ALLOWED_ORIGINS')) : [];
+
+
 return [

    'supportsCredentials' => false,

-    'allowedOrigins' => ['*'],
+    'allowedOrigins' => $allowed_origins,

    'allowedHeaders' => ['*'],