fruitcake / php-cors Goto Github PK

Hi
we just upgraded to Laravel 9 and PHP 8.1 and noticed the following message in the logs:
strpos(): Passing null to parameter #1 ($haystack) of type string is deprecated in vendor/fruitcake/php-cors/src/CorsService.php on line 108

Hi. I have PHP version 8.1.3.
We have an error for updating Laravel to version 9

Root composer.json requires fruitcake/laravel-cors ^1.2.0, found fruitcake/laravel-cors
[dev-feat-lazyoptions, dev-feat-groupmiddleware, dev-test-single, dev-feat-middlewaretest, 
dev-feat-actions, dev-feat-browsertests, dev-master, dev-v1-backport, dev-feat-prependmiddleware, 
dev-develop, dev-barryvdh-test-laravel9, 
v0.1, ..., 0.11.x-dev, v1.0.0, ..., 1.0.x-dev, v2.0.0-beta1, ..., 2.2.x-dev, v3.0.0, 3.0.x-dev 
(alias of dev-master)] 
but it does not match the constraint.

Steps needed to make it work (on Lumen only)

• copy cors.php to config\cors.php
• Then on bootstrap\app.php enable configuration, add this line $app->configure('cors');
• (in my case, I was in question why the cors value is empty)
• Then add this line \Illuminate\Http\Middleware\HandleCors::class to $app->middleware
• Once that done. If you have custom header such as in my case x-api-key you must add it to allowed_headers array example: ['x-api-key']
• Then on your api call such as axios you can add it to your custom headers which is base on this documentation Doc
• Note that the X-Auth-Token should be pass as x-auth-token as I check, the server returns it as small cases.

The Access-Control-Request-Methods header exists in both singular and plural variants.

My firefox sends the plural version, and this package seams to only support the singular version.

Hello I switched to Lumen 9.1.6. I had composer saying that laravel-cors has to be replaced. Currently, I have in app.php :

<?php

$app->configure('cors');

$app->middleware([
    Fruitcake\Cors\HandleCors::class,
]);

$app->register(Fruitcake\Cors\CorsServiceProvider::class);

I have replaced \Fruitcake\Cors\HandleCors::class, with \Illuminate\Http\Middleware\HandleCors::class but what about the service provider ?

The changelog is missing the updates for 1.3.0. Can this please be added?