<?php
// app/middleware/Cors.php

declare(strict_types=1);

namespace app\admin\middleware;

class Cors
{
    public function handle($request, \Closure $next)
    {
        // 设置CORS响应头
        header('Access-Control-Allow-Origin: *');  // 允许的源
        header('Access-Control-Allow-Methods: GET, POST, PUT, DELETE, PATCH, OPTIONS');
        header('Access-Control-Allow-Headers: Authorization, Content-Type, X-Requested-With, X-CSRF-Token');
        header('Access-Control-Allow-Credentials: true');
        header('Access-Control-Max-Age: 1728000');

        // 处理CORS预检请求
        if ($request->isOptions()) {
            return response()->code(200); // 预检请求，允许通过
        }

        return $next($request); // 继续处理请求
    }
}