call .env variables in cors.php

2026-03-12 15:52:07 +01:00
parent 3d7c76496f
commit a189ce98a0
1 changed files with 5 additions and 2 deletions
@@ -15,11 +15,14 @@ return [
    |
    */

-    'paths' => ['api/*', 'sanctum/csrf-cookie', 'broadcasting/auth'],
+
+    'paths' => explode(',', env('CORS_PATHS', 'api/*')),

    'allowed_methods' => ['*'],

-    'allowed_origins' => env('DEV', 0) == 1 ? ['http://localhost:5173'] : ['http://localhost'],
+    'allowed_origins' => env('DEV', 0) == 1
+        ? explode(',', env('DEV_CORS_ALLOWED_ORIGINS'))
+        : explode(',', env('PROD_CORS_ALLOWED_ORIGINS')),

    'allowed_origins_patterns' => [],