vendor/shopware/core/Framework/Api/EventListener/CorsListener.php line 22

Open in your IDE?
  1. <?php declare(strict_types=1);
  3. namespace Shopware\Core\Framework\Api\EventListener;
  5. use Shopware\Core\PlatformRequest;
  6. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  7. use Symfony\Component\HttpFoundation\Response;
  8. use Symfony\Component\HttpKernel\Event\RequestEvent;
  9. use Symfony\Component\HttpKernel\Event\ResponseEvent;
  10. use Symfony\Component\HttpKernel\KernelEvents;
  12. class CorsListener implements EventSubscriberInterface
  13. {
  14.     public static function getSubscribedEvents(): array
  15.     {
  16.         return [
  17.             KernelEvents::REQUEST => ['onKernelRequest', 9999],
  18.             KernelEvents::RESPONSE => ['onKernelResponse', 9999],
  19.         ];
  20.     }
  22.     public function onKernelRequest(RequestEvent $event): void
  23.     {
  24.         if (!$event->isMainRequest()) {
  25.             return;
  26.         }
  28.         $method = $event->getRequest()->getRealMethod();
  30.         if ($method === 'OPTIONS') {
  31.             $response = new Response();
  32.             $event->setResponse($response);
  33.         }
  34.     }
  36.     public function onKernelResponse(ResponseEvent $event): void
  37.     {
  38.         if (!$event->isMainRequest()) {
  39.             return;
  40.         }
  42.         $corsHeaders = [
  43.             'Content-Type',
  44.             'Authorization',
  45.             PlatformRequest::HEADER_CONTEXT_TOKEN,
  46.             PlatformRequest::HEADER_ACCESS_KEY,
  47.             PlatformRequest::HEADER_LANGUAGE_ID,
  48.             PlatformRequest::HEADER_VERSION_ID,
  49.             PlatformRequest::HEADER_INHERITANCE,
  50.             PlatformRequest::HEADER_FAIL_ON_ERROR,
  51.             PlatformRequest::HEADER_INDEXING_BEHAVIOR,
  52.             PlatformRequest::HEADER_SINGLE_OPERATION,
  53.             PlatformRequest::HEADER_INCLUDE_SEO_URLS,
  54.         ];
  56.         $response = $event->getResponse();
  57.         $response->headers->set('Access-Control-Allow-Origin', '*');
  58.         $response->headers->set('Access-Control-Allow-Methods', 'GET,POST,PUT,PATCH,DELETE');
  59.         $response->headers->set('Access-Control-Allow-Headers', implode(',', $corsHeaders));
  60.         $response->headers->set('Access-Control-Expose-Headers', implode(',', $corsHeaders));
  61.     }
  62. }