请求的云端资源给出了CORS错误 [英] requesting cloudinary resource gives CORS errors

问题描述

我有一个laravel/lumen服务器来管理我的云资源的上传.我还将服务器用作前端应用程序的API终结点.端点之一从Cloudinary返回文件.我通过将请求重定向到Cloudinary资源来做到这一点.但是我的应用失败，因为重定向的资源上没有CORS标头.

I have a laravel/lumen server managing uploads of my cloudinary resources. I'm also using the server as an API endpoint for my front end app. One of the endpoints returns a file from Cloudinary. I'm doing this by redirecting the request to the Cloudinary resource. However my app is failing because there are no CORS headers on the redirected resource.

return redirect()->to("https://res.cloudinary.com/gates/raw/upload/" . $upload->id);

我得到的错误是:

Redirect from 'https://{my-server.com}/api/v1/export' to 
'https://res.cloudinary.com/gates/raw/upload/{upload-id}' has been 
blocked by CORS policy: No 'Access-Control-Allow-Origin' header is 
present on the requested resource. Origin 'https://{my-frontend.com}' 
is therefore not allowed access.

推荐答案

您可以在服务器上使用此库:

You can use this library on your server: https://github.com/barryvdh/laravel-cors

return [
     /*
     |--------------------------------------------------------------------------
     | Laravel CORS
     |--------------------------------------------------------------------------
     |
     | allowedOrigins, allowedHeaders and allowedMethods can be set to array('*')
     | to accept any value.
     |
     */
    'supportsCredentials' => false,
    'allowedOrigins' => ['*'],
    'allowedHeaders' => ['Content-Type', 'X-Requested-With'],
    'allowedMethods' => ['*'], // ex: ['GET', 'POST', 'PUT',  'DELETE']
    'exposedHeaders' => [],
    'maxAge' => 0,
]


allowedOrigins => [*] mean that you give access to your server, you can add ip's or dns for restrict access to your server

这篇关于请求的云端资源给出了CORS错误的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！