jdesrosiers / silex-cors-provider
A silex service provider that adds CORS services to silex
Fund package maintenance!
jdesrosiers
Installs: 816 448
Dependents: 14
Suggesters: 0
Security: 0
Stars: 78
Watchers: 9
Forks: 25
Open Issues: 1
Requires
- silex/silex: ~2.0
Requires (Dev)
- phpunit/phpunit: 5.*
- symfony/browser-kit: 2.3.*
README
The CorsServiceProvider provides CORS support as middleware for your silex application. CORS allows you to make AJAX requests across domains. CORS uses OPTIONS requests to make preflight requests. Because silex doesn't have functionality for serving OPTIONS request by default, this service goes through all of your routes and generates the necessary OPTIONS routes.
Installation
Install the silex-cors-provider using composer. This project uses sematic versioning.
composer require jdesrosiers/silex-cors-provider "~1.0"
Parameters
- cors.allowOrigin: (string) Space separated set of allowed domains (wildcards allowed e.g. http://*.example.com). Defaults to all.
- cors.allowMethods: (string) Comma separated set of allowed HTTP methods. Defaults to all.
- cors.allowHeaders: (string) Comma separated set of allowed HTTP request headers. Defaults to all.
- cors.maxAge: (int) The number of seconds a CORS pre-flight response can be cached. Defaults to 0.
- cors.allowCredentials: (boolean) Are cookies allowed? Defaults to false.
- cors.exposeHeaders: (string) Comma separated set of headers that are safe to expose. Defaults to none. This should not include the six simple response headers which are always exposed:
Cache-Control
,Content-Language
,Content-Type
,Expires
,Last-Modified
,Pragma
.
Services
- cors: A function that can be added as after middleware to the Application. (Deprecated. Use
cors-enabled
instead) - cors-enabled: Pass this function an Application, a ControllerCollection, or a Controller and it will enable CORS
support for every route the object defines. Optionally, you can pass an array of options as a second parameter. The
options you can pass are the same as the
cors.*
parameters without thecors.
part. This is useful of you need different configuration for different routes. - options: Similar to
cors-enabled
but only creates OPTIONS routes with no CORS support. - allow: A function that can be added as after middleware to an Application, a ControllerCollection, or a Controller
that will add an
Allow
header to every route the object defines.
Registering
$app->register(new JDesrosiers\Silex\Provider\CorsServiceProvider(), [ "cors.allowOrigin" => "http://petstore.swagger.wordnik.com", ]);
Usage
Add CORS functionality to the entire application.
$app->get("/foo/{id}", function ($id) { /* ... */ }); $app->post("/foo/", function () { /* ... */ }); $app["cors-enabled"]($app);
Add CORS functionality to a controller collection.
$foo = $app["controllers_factory"]; $foo->get("/{id}", function () { /* ... */ }); $foo->post("/", function () { /* ... */ }); $app->mount("/foo", $app["cors-enabled"]($foo)); $app->get("/bar/{id}", function ($id) { /* ... */ }); // Not CORS enabled
Add CORS functionality to a controller.
$controller = $app->get("/foo/{id}", function ($id) { /* ... */ }); $app["cors-enabled"]($controller); $app->post("/foo/", function () { /* ... */ }); // Not CORS enabled