env('CORS_ALLOWED_HEADERS', 'origin, content-type, accept, authorization, x-requested-with'), /** * http://www.w3.org/TR/cors/#access-control-allow-methods-response-header */ 'allowed_methods' => env('CORS_ALLOWED_METHODS', 'GET, POST, OPTIONS, PUT, DELETE'), 'use_pre_flight_caching' => env('CORS_USE_PRE_FLIGHT_CACHING', true), /** * http://www.w3.org/TR/cors/#access-control-max-age-response-header */ 'max_age' => env('CORS_MAX_AGE', 3200), 'exposed_headers' => env('CORS_EXPOSED_HEADERS', ''), );