vendor/shopware/core/Framework/Api/EventListener/CorsListener.php line 25

Open in your IDE?
  1. <?php declare(strict_types=1);
  3. namespace Shopware\Core\Framework\Api\EventListener;
  5. use Shopware\Core\PlatformRequest;
  6. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  7. use Symfony\Component\HttpFoundation\Response;
  8. use Symfony\Component\HttpKernel\Event\RequestEvent;
  9. use Symfony\Component\HttpKernel\Event\ResponseEvent;
  10. use Symfony\Component\HttpKernel\KernelEvents;
  12. /**
  13.  * @deprecated tag:v6.5.0 - reason:becomes-internal - EventSubscribers will become internal in v6.5.0
  14.  */
  15. class CorsListener implements EventSubscriberInterface
  16. {
  17.     public static function getSubscribedEvents(): array
  18.     {
  19.         return [
  20.             KernelEvents::REQUEST => ['onKernelRequest', 9999],
  21.             KernelEvents::RESPONSE => ['onKernelResponse', 9999],
  22.         ];
  23.     }
  25.     public function onKernelRequest(RequestEvent $event): void
  26.     {
  27.         if (!$event->isMainRequest()) {
  28.             return;
  29.         }
  31.         $method = $event->getRequest()->getRealMethod();
  33.         if ($method === 'OPTIONS') {
  34.             $response = new Response();
  35.             $event->setResponse($response);
  36.         }
  37.     }
  39.     public function onKernelResponse(ResponseEvent $event): void
  40.     {
  41.         if (!$event->isMainRequest()) {
  42.             return;
  43.         }
  45.         $corsHeaders = [
  46.             'Content-Type',
  47.             'Authorization',
  48.             PlatformRequest::HEADER_CONTEXT_TOKEN,
  49.             PlatformRequest::HEADER_ACCESS_KEY,
  50.             PlatformRequest::HEADER_LANGUAGE_ID,
  51.             PlatformRequest::HEADER_VERSION_ID,
  52.             PlatformRequest::HEADER_INHERITANCE,
  53.             PlatformRequest::HEADER_FAIL_ON_ERROR,
  54.             PlatformRequest::HEADER_INDEXING_BEHAVIOR,
  55.             PlatformRequest::HEADER_SINGLE_OPERATION,
  56.             PlatformRequest::HEADER_INCLUDE_SEO_URLS,
  57.         ];
  59.         $response = $event->getResponse();
  60.         $response->headers->set('Access-Control-Allow-Origin', '*');
  61.         $response->headers->set('Access-Control-Allow-Methods', 'GET,POST,PUT,PATCH,DELETE');
  62.         $response->headers->set('Access-Control-Allow-Headers', implode(',', $corsHeaders));
  63.         $response->headers->set('Access-Control-Expose-Headers', implode(',', $corsHeaders));
  64.     }
  65. }