addHeader('Access-Control-Allow-Origin', '*'); $response->addHeader('Access-Control-Allow-Headers', $request->getHeaderLine('Access-Control-Request-Headers')); $response->addHeader('Access-Control-Request-Method', $request->getHeaderLine('Access-Control-Request-Method')); return $next($request); } }