phase 5

app/Http/Middleware/CollectCors.php

@@ -0,0 +1,35 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+
+class CollectCors
+{
+    public function handle(Request $request, Closure $next): Response
+    {
+        if ($request->isMethod('OPTIONS')) {
+            return response('', 204, $this->corsHeaders($request));
+        }
+
+        $response = $next($request);
+
+        foreach ($this->corsHeaders($request) as $key => $value) {
+            $response->headers->set($key, $value);
+        }
+
+        return $response;
+    }
+
+    private function corsHeaders(Request $request): array
+    {
+        return [
+            'Access-Control-Allow-Origin' => '*',
+            'Access-Control-Allow-Methods' => 'GET, POST, OPTIONS',
+            'Access-Control-Allow-Headers' => 'Content-Type, X-Requested-With',
+            'Access-Control-Max-Age' => '86400',
+        ];
+    }
+}