addHeader('Access-Control-Allow-Origin', '*'); $response->addHeader('Access-Control-Allow-Headers', $request->header('access-control-request-headers')); $response->addHeader('Access-Control-Request-Method', $request->header('access-control-request-method')); return $next($request); } }