PHPackages agungsugiarto/codeigniter4-cors - PHPackages - PHPackages [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register) 1. [Directory](/) 2. / 3. [API Development](/categories/api) 4. / 5. agungsugiarto/codeigniter4-cors ActiveLibrary[API Development](/categories/api) agungsugiarto/codeigniter4-cors =============================== Send CORS Headers in a CodeIgniter 4 application. v3.0.0(3y ago)6526.3k↓50%14[1 issues](https://github.com/agungsugiarto/codeigniter4-cors/issues)[2 PRs](https://github.com/agungsugiarto/codeigniter4-cors/pulls)2MITPHPPHP ^7.4 || ^8.0CI failing Since Aug 2Pushed 3y ago4 watchersCompare [ Source](https://github.com/agungsugiarto/codeigniter4-cors)[ Packagist](https://packagist.org/packages/agungsugiarto/codeigniter4-cors)[ Fund](https://saweria.co/agungsugiarto)[ RSS](/packages/agungsugiarto-codeigniter4-cors/feed)WikiDiscussions 3.x Synced 2w ago READMEChangelog (9)Dependencies (2)Versions (13)Used By (2) CORS Filter for CodeIgniter 4 ============================= [](#cors-filter-for-codeigniter-4) Inspired from for CodeIgniter 4 [![Latest Stable Version](https://camo.githubusercontent.com/43b5fbdd0e92f522d49a40c932e665948f78e49dcf50745871c5a7b6ace2fcea/68747470733a2f2f706f7365722e707567782e6f72672f6167756e67737567696172746f2f636f646569676e69746572342d636f72732f76)](https://packagist.org/packages/agungsugiarto/codeigniter4-cors)[![Total Downloads](https://camo.githubusercontent.com/7bb08761a7779ffe1adc6870ef797cbb07632cd67abea2e874f1773e8f13f72c/68747470733a2f2f706f7365722e707567782e6f72672f6167756e67737567696172746f2f636f646569676e69746572342d636f72732f646f776e6c6f616473)](https://packagist.org/packages/agungsugiarto/codeigniter4-cors)[![Latest Unstable Version](https://camo.githubusercontent.com/92f3db539db4e4f69f1d833c9868cd22a0fff0c726adb826930867c1a72e44ae/68747470733a2f2f706f7365722e707567782e6f72672f6167756e67737567696172746f2f636f646569676e69746572342d636f72732f762f756e737461626c65)](https://packagist.org/packages/agungsugiarto/codeigniter4-cors)[![License](https://camo.githubusercontent.com/3f589f920b3768dc4672ceef667eaeb502c35af22331c575dc28287335d627f7/68747470733a2f2f706f7365722e707567782e6f72672f6167756e67737567696172746f2f636f646569676e69746572342d636f72732f6c6963656e7365)](https://packagist.org/packages/agungsugiarto/codeigniter4-cors) **About** --------- [](#about) The `codeigniter4-cors` package allows you to send [Cross-Origin Resource Sharing](https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS/)headers with Codeigniter4 filter configuration. **Features** ------------ [](#features) - Handles CORS pre-flight OPTIONS requests - Adds CORS headers to your responses - Match routes to only add CORS to certain Requests **Upgrade from 2.x to v3.x** ---------------------------- [](#upgrade-from-2x-to-v3x) Upgrade from version 2.x to 3.x. Open your `composer.json` find `agungsugiarto/codeigniter4-cors` and change value to `^3.0` **Installation** ---------------- [](#installation) Require the `agungsugiarto/codeigniter4-cors` package in your `composer.json` and update your dependencies: ``` composer require agungsugiarto/codeigniter4-cors ``` **Global usage** ---------------- [](#global-usage) To allow CORS for all your routes, first register `CorsFilter.php` filter at the top of the `$aliases` property of `App/Config/Filter.php` class: ``` public $aliases = [ 'cors' => \Fluent\Cors\Filters\CorsFilter::class, // ... ]; ``` ### **Global restrictions** [](#global-restrictions) Restrict routes based on their URI pattern by editing **app/Config/Filters.php** and adding them to the `$filters` array, e.g.: ``` public $filters = [ // ... 'cors' => [ 'before' => ['api/*'], 'after' => ['api/*'] ], ]; ``` ### **Restricting a single route** [](#restricting-a-single-route) Any single route can be restricted by adding the filter option to the last parameter in any of the route definition methods: ``` $routes->get('api/users', 'UserController::index', ['filter' => 'cors']); ``` ### **Restricting Route Groups** [](#restricting-route-groups) In the same way, entire groups of routes can be restricted within the `group()` method: ``` $routes->group('api/v1', ['filter' => 'cors'], function ($routes) { // ... }); ``` **Configuration** ----------------- [](#configuration) The defaults are set in `config/cors.php`. Publish the config to copy the file to your own config: ``` php spark cors:publish ``` > **Note:** When using custom headers, like `X-Auth-Token` or `X-Requested-With`, you must set the `allowedHeaders` to include those headers. You can also set it to `['*']` to allow all custom headers. > **Note:** If you are explicitly whitelisting headers, you must include `Origin` or requests will fail to be recognized as CORS. ### **Options** [](#options) OptionDescriptionDefault valueallowedOriginsMatches the request origin. Wildcards can be used, eg. `*.mydomain.com``['*']`allowedOriginsPatternsMatches the request origin with preg\_match.`[]`allowedMethodsMatches the request method.`['*']`allowedHeadersSets the Access-Control-Allow-Headers response header.`['*']`exposedHeadersSets the Access-Control-Expose-Headers response header.`false`maxAgeSets the Access-Control-Max-Age response header.`0`supportsCredentialsSets the Access-Control-Allow-Credentials header.`false``allowedOrigins`, `allowedHeaders` and `allowedMethods` can be set to `['*']` to accept any value. > **Note:** For `allowedOrigins` you must include the scheme when not using a wildcard, eg. `['http://example.com', 'https://example.com']`. You must also take into account that the scheme will be present when using allowed\_origins\_patterns. > **Note:** Try to be a specific as possible. You can start developing with loose constraints, but it's better to be as strict as possible! **License** ----------- [](#license) Released under the MIT License, see [LICENSE](https://github.com/agungsugiarto/codeigniter4-cors/blob/master/LICENSE.md). ### Health Score 41 — FairBetter than 87% of packages Maintenance20 Infrequent updates — may be unmaintained Popularity42 Moderate usage in the ecosystem Community17 Small or concentrated contributor base Maturity68 Established project with proven stability Bus Factor1 Top contributor holds 100% of commits — single point of failure How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window. **Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores. **Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement. **Maturity (30%)** — Project age, version count, PHP version support, and release stability. ### Release Activity Cadence Every ~84 days Recently: every ~186 days Total 12 Last Release 1277d ago Major Versions 1.x-dev → 2.x-dev2021-02-19 v2.0.0 → 3.x-dev2023-02-18 PHP version history (3 changes)v1.0.0PHP ^7.2 v1.1.1PHP ^7.3 || ^8.0 3.x-devPHP ^7.4 || ^8.0 ### Community Maintainers ![](https://www.gravatar.com/avatar/d4650dfd30af25f75c8de8060b618e9773614a818000afeb21a9346c73955167?d=identicon)[agungsugiarto](/maintainers/agungsugiarto) --- Top Contributors [![agungsugiarto](https://avatars.githubusercontent.com/u/10989147?v=4)](https://github.com/agungsugiarto "agungsugiarto (30 commits)") --- Tags codeigniter4codeigniter4-librarycorsrequestapicorsajaxcodeigniter4codeigniter4-cors ### Code Quality TestsPHPUnit ### Embed Badge ![Health badge](/badges/agungsugiarto-codeigniter4-cors/health.svg) ``` [![Health](https://phpackages.com/badges/agungsugiarto-codeigniter4-cors/health.svg)](https://phpackages.com/packages/agungsugiarto-codeigniter4-cors) ``` ### Alternatives [nelmio/cors-bundle Adds CORS (Cross-Origin Resource Sharing) headers support in your Symfony application 1.9k102.6M220](/packages/nelmio-cors-bundle)[pubnub/pubnub This is the official PubNub PHP SDK repository. 1335.7M17](/packages/pubnub-pubnub)[abydahana/aksara Aksara is a modern, developer-friendly framework and CMS built on CodeIgniter 4, featuring rapid CRUD development, modular architecture, smart routing, flexible access control, API integration, and an AI assistant to make content management faster and smarter. 1141.2k](/packages/abydahana-aksara) PHPackages © 2026 [Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)