drewjoh · June 13, 2016 22:47 · Jun 13, 2016
diff --git a/Cors.php b/Cors.php
@@ -0,0 +1,14 @@
+<?php // /app/Http/Middleware/Cors.php
+
+namespace App\Http\Middleware;
+
+use Closure;
+
+class Cors {
+    public function handle($request, Closure $next)
+    {
+        return $next($request)
+          ->header('Access-Control-Allow-Origin', '*')
+          ->header('Access-Control-Allow-Methods', 'GET, POST, PUT, DELETE, OPTIONS');
+    }
+}
diff --git a/Kernel.php b/Kernel.php
@@ -0,0 +1,8 @@
+<?php // /app/Http/Kernel.php
+
+protected $routeMiddleware = [
+    'auth' => \App\Http\Middleware\Authenticate::class,
+    'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class,
+    'guest' => \App\Http\Middleware\RedirectIfAuthenticated::class,
+    'cors' => \App\Http\Middleware\Cors::class, // <<< add this line
+];
diff --git a/readme.md b/readme.md
@@ -0,0 +1,24 @@
+CORS stands for Cross-Origin Resource Sharing an is a specification that allow modern browsers to request (and receive) data from a domain other than the one serving the page that made the request.
+
+You're building a site with cool cross domain features, and then you try to make a XHR request, you see the following message in your browser’s console:
+
+```
+XMLHttpRequest cannot load http://site123.local. No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://site.local' is therefore not allowed access. The response had HTTP status code 500.
+```
+
+This means your server is not sending back to the client the headers that allow CORS:
+
+1.Access-Control-Allow-Origin
+2.Access-Control-Allow-Methods
+
+So we'll make a Laravel Middleware to fix this. (You could also add the proper headers at the Ngnix level).
+
+Create new middleware:
+
+```
+php artisan make:middleware Cors
+```
+
+Then follow the file examples in this gist to make it happen.
+
+See [http://enable-cors.org/](http://enable-cors.org/) for more information.
diff --git a/routes.php b/routes.php
@@ -0,0 +1,5 @@
+<?php
+
+Route::get('', ['middleware' => 'cors', function() {
+    return 'You did it!';
+}]);