diff --git a/api/src/Middleware/OriginAccessControlHandler.php b/api/src/Middleware/OriginAccessControlHandler.php index 215a019..a62de79 100644 --- a/api/src/Middleware/OriginAccessControlHandler.php +++ b/api/src/Middleware/OriginAccessControlHandler.php @@ -35,12 +35,12 @@ class OriginAccessControlHandler implements MiddlewareInterface $requestHeaders = $request->getHeaderLine('Access-Control-Request-Headers'); if ($this->testRoute($request)) { + // Stunden Minuten Sekunden + $accessControlMaxAge = 24 * 60 * 60; $response = $response->withHeader('Access-Control-Allow-Origin', $this->buildOrigin($request)); $response = $response->withHeader('Access-Control-Allow-Methods', implode(',', $methods)); $response = $response->withHeader('Access-Control-Allow-Headers', $requestHeaders); - - // Optional: Allow Ajax CORS requests with Authorization header - $response = $response->withHeader('Access-Control-Allow-Credentials', 'true'); + $response = $response->withHeader('Access-Control-Max-Age', (string)$accessControlMaxAge); } return $response; }