From eea3f4452e0d55d09d417cd6c9adba1444b62cd6 Mon Sep 17 00:00:00 2001
From: Kekskurse <git@kekskurse.de>
Date: Mon, 2 Dec 2019 16:59:48 +0100
Subject: [PATCH] Env

---
 .env.example                           | 3 +++
 app/Http/Middleware/CorsMiddleware.php | 5 ++++-
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/.env.example b/.env.example
index e2a2ac2..6d7f74c 100644
--- a/.env.example
+++ b/.env.example
@@ -21,3 +21,6 @@ S3_Bucket=abc
 
 CACHE_DRIVER=file
 QUEUE_CONNECTION=sync
+
+ENABLED_CORS=1
+CORS_URL=*
diff --git a/app/Http/Middleware/CorsMiddleware.php b/app/Http/Middleware/CorsMiddleware.php
index fe40cfa..560ede6 100644
--- a/app/Http/Middleware/CorsMiddleware.php
+++ b/app/Http/Middleware/CorsMiddleware.php
@@ -14,8 +14,11 @@ class CorsMiddleware
      */
     public function handle($request, Closure $next)
     {
+        if(getenv("ENABLED_CORS") == 0) {
+            return $next($request);
+        }
         $headers = [
-            'Access-Control-Allow-Origin'      => '*',
+            'Access-Control-Allow-Origin'      => getenv("CORS_URL"),
             'Access-Control-Allow-Methods'     => 'POST, GET, OPTIONS, PUT, DELETE',
             'Access-Control-Allow-Credentials' => 'true',
             'Access-Control-Max-Age'           => '86400',