src/EventSubscriber/CorsSubscriber.php line 18

Open in your IDE?
  1. <?php
  3. namespace App\EventSubscriber;
  5. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  6. use Symfony\Component\HttpKernel\Event\ResponseEvent;
  7. use Symfony\Component\HttpKernel\KernelEvents;
  9. class CorsSubscriber implements EventSubscriberInterface
  10. {
  11.     public static function getSubscribedEvents(): array
  12.     {
  13.         return [
  14.             KernelEvents::RESPONSE => 'onKernelResponse',
  15.         ];
  16.     }
  18.     public function onKernelResponse(ResponseEvent $event): void
  19.     {
  20.         $request = $event->getRequest();
  21.         $response = $event->getResponse();
  23.         if (strpos($request->getPathInfo(), '/acc/api/') === 0) {
  24.             $origin = $request->headers->get('Origin', $request->getSchemeAndHttpHost());
  25.             $response->headers->set('Access-Control-Allow-Origin', $origin);
  26.             $response->headers->set('Access-Control-Allow-Methods', 'POST, GET, OPTIONS');
  27.             $response->headers->set('Access-Control-Allow-Headers', 'Content-Type, Accept, X-Requested-With, Authorization');
  28.             $response->headers->set('Access-Control-Allow-Credentials', 'true');
  30.             $exposeHeaders = ['X-Access-Login', 'X-Access-Email', 'X-Access-Token', 'X-Access-Avatar'];
  31.             $existingHeaders = [];
  33.             foreach ($exposeHeaders as $header) {
  34.                 if ($response->headers->has($header)) {
  35.                     $existingHeaders[] = $header;
  36.                 }
  37.             }
  39.             if (!empty($existingHeaders)) {
  40.                 $response->headers->set(
  41.                     'Access-Control-Expose-Headers',
  42.                     implode(', ', $existingHeaders)
  43.                 );
  44.             } else {
  45.                 $response->headers->set(
  46.                     'Access-Control-Expose-Headers',
  47.                     'X-Access-Login, X-Access-Email, X-Access-Token, X-Access-Agency, X-Access-Onsite, X-Access-Avatar'
  48.                 );
  49.             }
  50.         }
  52.         $currentLocale = $request->getLocale();
  53.         $response->headers->set('x-ip-country', strtoupper($currentLocale));
  54.     }
  55. }