Laravel 5.4 크로스 도 메 인 JS 크로스 도 메 인 문제 해결

   header('Access-Control-Allow-Origin:*');
   //     
   header('Access-Control-Allow-Methods:*');
   //   
   header('Access-Control-Allow-Headers:*');
   //      
   header('Access-Control-Allow-Credentials:false');//cookie   true

server
{
   listen 8084;
   server_name localhost;
   location /index.php/ {
       proxy_pass http://localhost:8085;

       #            ，*    
       add_header Access-Control-Allow-Methods *;

       #          ，              
       add_header Access-Control-Max-Age 3600;
       #    cookie          ，    true
       add_header Access-Control-Allow-Credentials true;

       #              （             ） 
       #   $http_origin                  *     cookie      * 
       add_header Access-Control-Allow-Origin $http_origin;

       #                
       add_header Access-Control-Allow-Headers 
       $http_access_control_request_headers;

       #   OPTIONS    ，            
       #                 
       if ($request_method = OPTIONS){
           return 200;
       }
   }
}

     ：config/app.php,      
   
   Barryvdh\Cors\ServiceProvider::class,
       ：
               ，       middleware    ：
   
      app/Http/kernel.php   ：
   
   protected $middleware = [
       // ...
       \Barryvdh\Cors\HandleCors::class,
   ];
         
               ，           OK
   
   protected $middlewareGroups = [
       'web' => [
          // ...
       ],
   
       'api' => [
           // ...
           \Barryvdh\Cors\HandleCors::class,
       ],
   ];
       
       ：
   
   php artisan vendor:publish --provider="Barryvdh\Cors\ServiceProvider"
          ：
   
   return [
        /*
        |--------------------------------------------------------------------------
        | Laravel CORS
        |--------------------------------------------------------------------------
        |
        | allowedOrigins, allowedHeaders and allowedMethods can be set to array('*')
        | to accept any value.
        |
        */
       'supportsCredentials' => false,
       'allowedOrigins' => ['*'],
       'allowedHeaders' => ['Content-Type', 'X-Requested-With'],
       'allowedMethods' => ['*'], // ex: ['GET', 'POST', 'PUT',  'DELETE']
       'exposedHeaders' => [],
       'maxAge' => 0,
   ]

/**
 * Created by PhpStorm.
 * User: machi
 * Date: 2018/5/24
 * Time:   2:39
 */
namespace App\Http\Middleware;
use Illuminate\Http\Request;
use Closure;
class Cors
{
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @return mixed
     */
    public function handle(Request $request, Closure $next)
    {
        if(!empty($_SERVER["HTTP_ORIGIN"])){
            $allow_origin=$_SERVER["HTTP_ORIGIN"];
        }else{
            $allow_origin='http://test.senpuyun.com';
        }
        if(strtoupper($_SERVER['REQUEST_METHOD'])== 'OPTIONS'){
            return response('ok',200)
                ->header('Access-Control-Allow-Origin', $allow_origin)
                ->header('Access-Control-Allow-Credentials','true')
                ->header('Access-Control-Allow-Headers', 'Origin, X-Requested-With, Content-Type, Accept')
                ->header('Access-Control-Allow-Methods', 'GET, POST, PATCH, PUT, OPTIONS, DELETE,HEAD');
        }else{
            $response = $next($request);
            $response->header('Access-Control-Allow-Origin', $allow_origin);
            $response->header('Access-Control-Allow-Credentials','true');
            $response->header('Access-Control-Allow-Headers', 'Origin, X-Requested-With, Content-Type, Accept');
            $response->header('Access-Control-Allow-Methods', 'GET, POST, PATCH, PUT, OPTIONS, DELETE,HEAD');
            return $response;
        }
    }
}

$app->routeMiddleware([
    'auth' => App\Http\Middleware\Authenticate::class,
    'jwtauth'    => App\Http\Middleware\JwtAuthenticate::class,
    'jwtrefresh'    => App\Http\Middleware\JwtRefreshToken::class,
    'partner' => App\Http\Middleware\Partner::class,
    'cors' =>\App\Http\Middleware\Cors::class,
    //'jwt.auth'    => Tymon\JWTAuth\Middleware\GetUserFromToken::class,
    //'jwt.refresh' => Tymon\JWTAuth\Middleware\RefreshToken::class,
]);

$app->group(['prefix' => 'and/{version}'], function () use($app){
    $app->group(['middleware' => 'cors'], function($api) {
        $api->group(['middleware' => 'partner'], function($api1) {
            $api1->post('partner/answer', ['as' => 'partner.answer', 'uses' => 'PartnerController@answer']);
        });
    });
 )};