From d9942e135a74701a4b74d7b3d4d2beaf11f8c70d Mon Sep 17 00:00:00 2001
From: Doar Mihai <mihai@invata-progremare.ro>
Date: Tue, 24 Mar 2026 22:03:06 +0200
Subject: [PATCH] cors issue fix

---
 app/Http/Middleware/CollectCors.php | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/app/Http/Middleware/CollectCors.php b/app/Http/Middleware/CollectCors.php
index 5af5054..316f563 100644
--- a/app/Http/Middleware/CollectCors.php
+++ b/app/Http/Middleware/CollectCors.php
@@ -25,11 +25,15 @@ class CollectCors
 
     private function corsHeaders(Request $request): array
     {
+        // Get the origin from the request, default to '*' if not present
+        $origin = $request->header('Origin', '*');
+
         return [
-            'Access-Control-Allow-Origin' => '*',
+            'Access-Control-Allow-Origin' => $origin,
             'Access-Control-Allow-Methods' => 'GET, POST, OPTIONS',
             'Access-Control-Allow-Headers' => 'Content-Type, X-Requested-With',
             'Access-Control-Max-Age' => '86400',
+            'Access-Control-Allow-Credentials' => 'true',
         ];
     }
 }