在 Google App Engine 柔性环境 PHP (Laravel) 上启用 CORS

Question

0

我在为使用 Google App Engine 和柔性环境托管的 PHP (laravel) 应用程序启用 CORS 支持时遇到问题。

使用 axios 库的每个 AJAX 请求都会导致以下错误...

从源“http://localhost:8080”访问“https://api.[something].services/request”处的 XMLHttpRequest 已被 CORS 策略阻止：否“Access-Control-Allow-Origin”请求的资源上存在标头。

Answer 1

您很可能需要添加：

header('Access-Control-Allow-Origin: *');

上面的 PHP 代码表明通配符 * 将允许 每个人 向您的 Web 应用程序发出 Ajax 请求。

header('Access-Control-Allow-Origin: http://example.com');

上面的 PHP 代码表明example.com 有权向您的 Web 应用程序发出跨域请求。

另外，我建议你看看这个PHP Laravel package 发送带有 Laravel 中间件配置的跨域资源共享标头。

另见：

• How to handle CORS (or whatever headers) with GAE in flex environment and PHP runtime?

Answer 2

runtime: php
env: flex
manual_scaling:
  instances: 1
resources:
  cpu: 4
  memory_gb: 4
  disk_size_gb: 20
runtime_config:
  document_root: public

# Ensure we skip ".env", which is only for local development
skip_files:
  - .env
  - .git
  - /vendor/
  - /node_modules/

env_variables:
  # Put production environment variables here.
  APP_LOG: errorlog
  APP_KEY: [REDACTED]
  APP_NAME: MyApp
  APP_ENV: production
  APP_DEBUG: false
  APP_URL: https://example.com
  CUSTOM_CSS: example.css
  FRONTEND_URL: https://web.example.com

  LOG_CHANNEL: stackdriver
  LOG_SLACK_WEBHOOK_URL: https://hooks.slack.com/services/T011E768GNR/B011E7A307P/CGK4zZwTG1tieLwZ1uTx77

  DB_CONNECTION: mysql
  DB_HOST: 127.0.0.1
  DB_PORT: 3306
  DB_DATABASE: dbname
  DB_USERNAME: root
  DB_PASSWORD: [REDACTED]
  DB_SOCKET: "[REDACTED]"

这是 app.yml 的一部分

This is a part of composer.json

protected $middleware = [
        \App\Http\Middleware\TrustProxies::class,
        \App\Http\Middleware\CheckForMaintenanceMode::class,
        \Illuminate\Foundation\Http\Middleware\ValidatePostSize::class,
        \App\Http\Middleware\TrimStrings::class,
        \Illuminate\Foundation\Http\Middleware\ConvertEmptyStringsToNull::class,
        \App\Http\Middleware\GaeProxyIp::class,
        \App\Http\Middleware\GaeSetHstsHeader::class,
        \Fruitcake\Cors\HandleCors::class,
    ];

使用 Fruitcke\Cors

和 cors 使用默认配置 im

'paths' => ['api/*'],

    /*
    * Matches the request method. `['*']` allows all methods.
    */
    'allowed_methods' => ['*'],

    /*
     * Matches the request origin. `['*']` allows all origins. Wildcards can be used, eg `*.mydomain.com`
     */
    'allowed_origins' => ['*'],

    /*
     * Patterns that can be used with `preg_match` to match the origin.
     */
    'allowed_origins_patterns' => [],

    /*
     * Sets the Access-Control-Allow-Headers response header. `['*']` allows all headers.
     */
    'allowed_headers' => ['*'],

感谢您的支持