Laravel 5 CORS - XMLHttpRequest 无法加载 http://myapi.com。预检响应具有无效的 HTTP 状态代码 500

Question

我正在使用 Laravel 5 和一个名为 CORS 的库。我遇到了一个错误，我不明白它是什么以及为什么会发生。

我正在开发一个供网站前端和应用程序使用的 API。

我正在尝试对 API 进行 ajax 调用：

$.ajax({
  url: 'http://myapi.com/call',
  type: 'GET',
  headers: {'Authorization' : 'Bearer token123'},
  crossDomain: true,
  contentType: 'application/x-www-form-urlencoded; charset=UTF-8',
  success   : function(data) { console.log(data);},
  error: function(xhr) {console.log(xhr)}
});

但是我得到了这个错误：

XMLHttpRequest 无法加载 http://myapi.com/call。回应 预检具有无效的 HTTP 状态代码 500

但是，当我从请求中删除以下行时，效果很好。

headers: {'Authorization' : 'Bearer token123'},

编辑：我的配置/cors.php

'supportsCredentials' => false,
'allowedOrigins' => ['*'],
'allowedHeaders' => ['*'],
'allowedMethods' => ['GET', 'POST', 'PUT',  'DELETE', 'OPTIONS'],
'exposedHeaders' => [],
'maxAge' => 0,
'hosts' => [],

知道如何解决吗？

Answer 1

你是否在 laravel 的服务器上配置了 CORS，有几个选项可以做到这一点

# one of the way is to add below in .htaccess (modify accordingly)

Header add Access-Control-Allow-Origin "*"
Header add Access-Control-Allow-Headers "origin, x-requested-with, content-type"
Header add Access-Control-Allow-Methods "PUT, GET, POST, DELETE, OPTIONS"

# other options you can refer to below link of laracasts

来源：https://laracasts.com/discuss/channels/requests/laravel-5-cors-headers-with-filters/?page=2

Answer 2

以下修复对我有用 (Laravel 5.4) 您可以将以下内容添加到 laravel cors 中间件中

public function handle($request, Closure $next)
{
     if ($request->getMethod() == "OPTIONS") {
       return response(['OK'], 200)->withHeaders([
           'Access-Control-Allow-Origin' => '*',
           'Access-Control-Allow-Methods' => 'GET, POST, PUT, DELETE',
           'Access-Control-Allow-Credentials' => true,
           'Access-Control-Allow-Headers' => 'Authorization, Content-Type',
         ]);
     }

     return $next($request)
     ->header('Access-Control-Allow-Origin', '*')
     ->header('Access-Control-Allow-Methods', 'GET, POST, PUT, DELETE')
     ->header('Access-Control-Allow-Credentials', true)
     ->header('Access-Control-Allow-Headers', 'Authorization,Content-Type');
}

并且为每个收到预检请求的路线添加一个选项方法

Route::post('/yourroute', 'YourController@index');
Route::options('/yourroute', 'YourController@index');