/** * Handle an incoming request. Based on Asm89\Stack\Cors by asm89 * @see https://github.com/asm89/stack-cors/blob/master/src/Asm89/Stack/Cors.php * * @param \Illuminate\Http\Request $request * @param \Closure $next * @return mixed */ public function handle($request, Closure $next) { if (!$this->cors->isCorsRequest($request)) { return $next($request); } if (!$this->cors->isActualRequestAllowed($request)) { abort(403); } /** @var \Illuminate\Http\Response $response */ $response = $next($request); return $this->cors->addActualRequestHeaders($response, $request); }