Es sollte auf die notwendigen Header geachtet werden (https://developer.mozilla.org/de/docs/Web/HTTP/CORS)

api/src/Middleware/OriginAccessControlHandler.php

@@ -23,8 +23,6 @@ class OriginAccessControlHandler implements MiddlewareInterface
     public function process(Request $request, RequestHandler $handler): Response
     {
         $response = $handler->handle($request);
-
-
         return $this->originAccessControl($request, $response);
     }
 

api/tests/api/Views/BrowseWorkingHoursMonthlyCest.php

@@ -14,6 +14,10 @@ class BrowseWorkingHoursMonthlyCest
         $I->haveHttpHeader('Access-Control-Request-Method', 'GET');
         $I->sendOptions('/views/working-hours/monthly');
         $I->seeResponseCodeIs(HttpCode::OK);
+        $I->seeHttpHeader('Access-Control-Allow-Origin', Api::TEST_ORIGIN);
+        $I->seeHttpHeader('Access-Control-Allow-Methods');
+        $I->seeHttpHeader('Access-Control-Allow-Headers');
+        $I->seeHttpHeader('Access-Control-Max-Age');
     }
 
     /**

api/tests/api/Views/BrowseWorkingHoursWeeklyCest.php

@@ -14,6 +14,10 @@ class BrowseWorkingHoursWeeklyCest
         $I->haveHttpHeader('Access-Control-Request-Method', 'GET');
         $I->sendOptions('/views/working-hours/weekly');
         $I->seeResponseCodeIs(HttpCode::OK);
+        $I->seeHttpHeader('Access-Control-Allow-Origin', Api::TEST_ORIGIN);
+        $I->seeHttpHeader('Access-Control-Allow-Methods');
+        $I->seeHttpHeader('Access-Control-Allow-Headers');
+        $I->seeHttpHeader('Access-Control-Max-Age');
     }
 
     /**

api/tests/api/Views/BrowseWorkingHoursYearlyCest.php

@@ -14,6 +14,10 @@ class BrowseWorkingHoursYearlyCest
         $I->haveHttpHeader('Access-Control-Request-Method', 'GET');
         $I->sendOptions('/views/working-hours/yearly');
         $I->seeResponseCodeIs(HttpCode::OK);
+        $I->seeHttpHeader('Access-Control-Allow-Origin', Api::TEST_ORIGIN);
+        $I->seeHttpHeader('Access-Control-Allow-Methods');
+        $I->seeHttpHeader('Access-Control-Allow-Headers');
+        $I->seeHttpHeader('Access-Control-Max-Age');
     }
 
     /**

api/tests/api/WorkingHours/BrowseWorkingHoursCest.php

@@ -14,6 +14,10 @@ class BrowseWorkingHoursCest
         $I->haveHttpHeader('Access-Control-Request-Method', 'GET');
         $I->sendOptions('/working-hours');
         $I->seeResponseCodeIs(HttpCode::OK);
+        $I->seeHttpHeader('Access-Control-Allow-Origin', Api::TEST_ORIGIN);
+        $I->seeHttpHeader('Access-Control-Allow-Methods');
+        $I->seeHttpHeader('Access-Control-Allow-Headers');
+        $I->seeHttpHeader('Access-Control-Max-Age');
     }
 
     /**

api/tests/api/WorkingHours/CreateWorkingHoursCest.php

@@ -14,6 +14,10 @@ class CreateWorkingHoursCest
         $I->haveHttpHeader('Access-Control-Request-Method', 'POST');
         $I->sendOptions('/working-hours');
         $I->seeResponseCodeIs(HttpCode::OK);
+        $I->seeHttpHeader('Access-Control-Allow-Origin', Api::TEST_ORIGIN);
+        $I->seeHttpHeader('Access-Control-Allow-Methods');
+        $I->seeHttpHeader('Access-Control-Allow-Headers');
+        $I->seeHttpHeader('Access-Control-Max-Age');
     }
 
     public function createWorkingHoursWithNewValidRecord(ApiTester $I): void

api/tests/api/WorkingHours/ReadWorkingHoursCest.php

@@ -14,6 +14,10 @@ class ReadWorkingHoursCest
         $I->haveHttpHeader('Access-Control-Request-Method', 'GET');
         $I->sendOptions('/working-hours/2020-04-15');
         $I->seeResponseCodeIs(HttpCode::OK);
+        $I->seeHttpHeader('Access-Control-Allow-Origin', Api::TEST_ORIGIN);
+        $I->seeHttpHeader('Access-Control-Allow-Methods');
+        $I->seeHttpHeader('Access-Control-Allow-Headers');
+        $I->seeHttpHeader('Access-Control-Max-Age');
     }
 
     public function readExistingWorkingHours(ApiTester $I): void

api/tests/api/WorkingHours/UpdateWorkingHoursCest.php

@@ -14,6 +14,10 @@ class UpdateWorkingHoursCest
         $I->haveHttpHeader('Access-Control-Request-Method', 'PUT');
         $I->sendOptions('/working-hours/2020-01-15');
         $I->seeResponseCodeIs(HttpCode::OK);
+        $I->seeHttpHeader('Access-Control-Allow-Origin', Api::TEST_ORIGIN);
+        $I->seeHttpHeader('Access-Control-Allow-Methods');
+        $I->seeHttpHeader('Access-Control-Allow-Headers');
+        $I->seeHttpHeader('Access-Control-Max-Age');
     }
 
     public function updateWorkingHoursWithExistingValidRecord(ApiTester $I): void