'POST,GET,OPTIONS,PUT,DELETE', 'Access-Control-Allow-Headers' => 'Content-Type, X-Auth-Token, Origin, Authorization', ]; if ($request->getMethod() == "OPTIONS") { return response()->json('OK',200,$headers); } $response = $next($request); foreach ($headers as $key => $value) { $response->header($key, $value); } return $response; } }