header('Origin'); if ($origin != 'http://localhost:3000'){ $origin = 'https://app.axicon.ir'; } return $next($request) ->header('Access-Control-Allow-Origin', $origin) ->header('Access-Control-Allow-Methods', 'POST, GET, OPTIONS, PUT, DELETE') ->header('Access-Control-Allow-Credentials', 'true') ->header('Access-Control-Allow-Headers', 'access-control-allow-origin,X-Requested-With,Content-Type,X-XSRF-TOKEN,Authorization') ->header('Accept', 'application/json'); } }