Env

.env.example

@@ -21,3 +21,6 @@ S3_Bucket=abc
 
 CACHE_DRIVER=file
 QUEUE_CONNECTION=sync
+
+ENABLED_CORS=1
+CORS_URL=*

app/Http/Middleware/CorsMiddleware.php

@@ -14,8 +14,11 @@ class CorsMiddleware
      */
     public function handle($request, Closure $next)
     {
+        if(getenv("ENABLED_CORS") == 0) {
+            return $next($request);
+        }
         $headers = [
-            'Access-Control-Allow-Origin'      => '*',
+            'Access-Control-Allow-Origin'      => getenv("CORS_URL"),
             'Access-Control-Allow-Methods'     => 'POST, GET, OPTIONS, PUT, DELETE',
             'Access-Control-Allow-Credentials' => 'true',
             'Access-Control-Max-Age'           => '86400',