fix(core) Update cors config

meeio-app · Dec 2, 2024 · 67db456 · 67db456
1 parent 9f56e38
commit 67db456
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 14 deletions.
diff --git a/config/packages/nelmio_cors.yaml b/config/packages/nelmio_cors.yaml
@@ -2,13 +2,9 @@ nelmio_cors:
     defaults:
         origin_regex: false
         allow_origin: ["%env(CORS_ALLOW_ORIGIN)%"]
-        allow_methods: ["GET", "POST", "PUT", "PATCH", "DELETE"]
-        allow_headers: ["Authorization", "Accept"]
-        max_age: 3600
+        allow_methods: ["GET", "OPTIONS", "POST", "PUT", "PATCH", "DELETE"]
+        allow_headers: ["Content-Type", "Authorization", "Accept"]
+        expose_headers: ["Link"]
+        max_age: 0
     paths:
-        "^/":
-            origin_regex: false
-            allow_origin: ["%env(CORS_ALLOW_ORIGIN)%"]
-            allow_methods: ["GET", "POST", "PUT", "PATCH", "DELETE"]
-            allow_headers: ["Authorization", "Accept"]
-            max_age: 3600
+        "^/": ~
diff --git a/src/EventSubscriber/ResponseSubscriber.php b/src/EventSubscriber/ResponseSubscriber.php
@@ -17,12 +17,11 @@ class ResponseSubscriber implements EventSubscriberInterface
 {
     public function onKernelResponse(ResponseEvent $event): void
     {
-        $initialRequest = $event->getRequest();
-
-        // if (!\in_array($initialRequest->getMethod(), ['GET', 'POST', 'PUT', 'PATCH', 'DELETE'])) {
-        //     return;
-        // }
+        if (!$event->isMainRequest()) {
+            return;
+        }
 
+        $initialRequest = $event->getRequest();
         $initialResponse = $event->getResponse();
 
         // Enabled only for project routes, not symfony routes like the profiler