header('Access-Control-Allow-Origin', '*') ->header("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE") ->header("Access-Control-Allow-Headers", "X-Requested-With, Content-Type, X-Token-Auth, Authorization"); // return $next($request); } }