Yiisoft\Yii\Middleware\CorsAllowAll

Complexity

Total Complexity

2

Size/Duplication

Total Lines	27
Duplicated Lines	0 %

Test Coverage

Coverage

100%

Importance

Changes	1
Bugs	0	Features	0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	3	1
A	process()	0	20	1

<?php

declare(strict_types=1);

namespace Yiisoft\Yii\Middleware;

use Psr\Http\Message\ResponseInterface;
use Psr\Http\Message\ServerRequestInterface;
use Psr\Http\Server\MiddlewareInterface;
use Psr\Http\Server\RequestHandlerInterface;
use Yiisoft\ErrorHandler\HeadersProvider;

The type Yiisoft\ErrorHandler\HeadersProvider was not found. Maybe you did not declare it correctly or list all dependencies?

use Yiisoft\Http\Header;

/**
 * Adds Cross-Origin Resource Sharing (CORS) headers allowing everything to the response.
 */
final class CorsAllowAll implements MiddlewareInterface
{
    public function __construct(
        private HeadersProvider $headersProvider
    ) {
    }

    public function process(ServerRequestInterface $request, RequestHandlerInterface $handler): ResponseInterface
    {
        $this->headersProvider->add(Header::ACCESS_CONTROL_ALLOW_ORIGIN, '*');
        $this->headersProvider->add(Header::ACCESS_CONTROL_ALLOW_METHODS, 'GET,OPTIONS,HEAD,POST,PUT,PATCH,DELETE');
        $this->headersProvider->add(Header::ACCESS_CONTROL_ALLOW_HEADERS, '*');
        $this->headersProvider->add(Header::ACCESS_CONTROL_EXPOSE_HEADERS, '*');
        $this->headersProvider->add(Header::ACCESS_CONTROL_ALLOW_CREDENTIALS, 'true');
        $this->headersProvider->add(Header::ACCESS_CONTROL_MAX_AGE, '86400');

        $response = $handler->handle($request);

        return $response
            ->withHeader(Header::ALLOW, '*')
            ->withHeader(Header::VARY, 'Origin')
            ->withHeader(Header::ACCESS_CONTROL_ALLOW_ORIGIN, '*')
            ->withHeader(Header::ACCESS_CONTROL_ALLOW_METHODS, 'GET,OPTIONS,HEAD,POST,PUT,PATCH,DELETE')
            ->withHeader(Header::ACCESS_CONTROL_ALLOW_HEADERS, '*')
            ->withHeader(Header::ACCESS_CONTROL_EXPOSE_HEADERS, '*')
            ->withHeader(Header::ACCESS_CONTROL_ALLOW_CREDENTIALS, 'true')
            ->withHeader(Header::ACCESS_CONTROL_MAX_AGE, '86400');
    }
}