withHeader('Access-Control-Allow-Origin', '*'); // $response->withHeader('Access-Control-Allow-Methods', 'GET, POST, PUT, DELETE, OPTIONS'); // $response->withHeader('Access-Control-Allow-Headers', 'x-requested-with, Content-Type, Accept, Origin, Authorization'); // $response->withHeader('Access-Control-Allow-Credentials', 'true'); // return $response; $response = $next($request); if (config('app.debug')) { $response->withHeader('Access-Control-Allow-Origin', '*'); $response->withHeader('Access-Control-Allow-Methods', 'GET, POST, PUT, DELETE, OPTIONS'); $response->withHeader('Access-Control-Allow-Headers', 'x-requested-with, Content-Type, Accept, Origin, Authorization'); $response->withHeader('Access-Control-Allow-Credentials', 'true'); } return $response; } }