vendor/shopware/core/Framework/Api/EventListener/CorsListener.php line 41

Open in your IDE?
  1. <?php declare(strict_types=1);
  3. namespace Shopware\Core\Framework\Api\EventListener;
  5. use Shopware\Core\Framework\Log\Package;
  6. use Shopware\Core\PlatformRequest;
  7. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  8. use Symfony\Component\HttpFoundation\Response;
  9. use Symfony\Component\HttpKernel\Event\RequestEvent;
  10. use Symfony\Component\HttpKernel\Event\ResponseEvent;
  11. use Symfony\Component\HttpKernel\KernelEvents;
  13. /**
  14.  * @deprecated tag:v6.5.0 - reason:becomes-internal - EventSubscribers will become internal in v6.5.0
  15.  */
  16. #[Package('core')]
  17. class CorsListener implements EventSubscriberInterface
  18. {
  19.     public static function getSubscribedEvents(): array
  20.     {
  21.         return [
  22.             KernelEvents::REQUEST => ['onKernelRequest', 9999],
  23.             KernelEvents::RESPONSE => ['onKernelResponse', 9999],
  24.         ];
  25.     }
  27.     public function onKernelRequest(RequestEvent $event): void
  28.     {
  29.         if (!$event->isMainRequest()) {
  30.             return;
  31.         }
  33.         $method = $event->getRequest()->getRealMethod();
  35.         if ($method === 'OPTIONS') {
  36.             $response = new Response();
  37.             $event->setResponse($response);
  38.         }
  39.     }
  41.     public function onKernelResponse(ResponseEvent $event): void
  42.     {
  43.         if (!$event->isMainRequest()) {
  44.             return;
  45.         }
  47.         $corsHeaders = [
  48.             'Content-Type',
  49.             'Authorization',
  50.             PlatformRequest::HEADER_CONTEXT_TOKEN,
  51.             PlatformRequest::HEADER_ACCESS_KEY,
  52.             PlatformRequest::HEADER_LANGUAGE_ID,
  53.             PlatformRequest::HEADER_VERSION_ID,
  54.             PlatformRequest::HEADER_INHERITANCE,
  55.             PlatformRequest::HEADER_FAIL_ON_ERROR,
  56.             PlatformRequest::HEADER_INDEXING_BEHAVIOR,
  57.             PlatformRequest::HEADER_SINGLE_OPERATION,
  58.             PlatformRequest::HEADER_INCLUDE_SEO_URLS,
  59.         ];
  61.         $response = $event->getResponse();
  62.         $response->headers->set('Access-Control-Allow-Origin', '*');
  63.         $response->headers->set('Access-Control-Allow-Methods', 'GET,POST,PUT,PATCH,DELETE');
  64.         $response->headers->set('Access-Control-Allow-Headers', implode(',', $corsHeaders));
  65.         $response->headers->set('Access-Control-Expose-Headers', implode(',', $corsHeaders));
  66.     }
  67. }