Longman\LaravelLodash\Middlewares\AllowCorsRequests::handle()

Complexity

Conditions	7
Paths	11

Size

Total Lines	48
Code Lines	31

Duplication

Lines	0
Ratio	0 %

Code Coverage

Tests	0
CRAP Score	56

Importance

Changes

0

<?php
    public function handle(Request $request, Closure $next)
    {
        $response = $next($request);

        if (! $request->headers->has('Origin')) {
            return $response;
        }

        $host = parse_url($request->headers->get('Origin'), PHP_URL_HOST);
        if (empty($host)) {
            return $response;
        }

        $allowed_origins = config('lodash.cors.allow_origins');

        $found = false;
        foreach ($allowed_origins as $origin) {
            if ($found = ends_with($host, $origin)) {
                break;
            }
        }

        if (! $found) {
            return $response;
        }

        if ($request->method() === 'OPTIONS') {
            $allowed_headers = config('lodash.cors.allow_headers');
            $allowed_methods = config('lodash.cors.allow_methods');

            $response
                ->header('Access-Control-Allow-Origin', $request->headers->get('Origin'))
                ->header('Access-Control-Allow-Credentials', 'true')
                ->header('Access-Control-Allow-Methods', implode(',', $allowed_methods))
                ->header('Access-Control-Allow-Headers', implode(',', $allowed_headers))
                ->header('Access-Control-Max-Age', '1728000')
                ->header('Content-Type', 'application/json');
        } else {
            $response->headers->set('Access-Control-Allow-Credentials', 'true');
            $response->headers->set(
                'Access-Control-Allow-Origin',
                $request->headers->get('Origin')
            );
            $response->headers->set('Content-Type', 'application/json');
        }

        return $response;
    }
}