PHPackages                             cross/laravel-cors - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [HTTP & Networking](/categories/http)
4. /
5. cross/laravel-cors

ActiveLibrary[HTTP & Networking](/categories/http)

cross/laravel-cors
==================

Adds CORS (Cross-Origin Resource Sharing) headers support in your Laravel application

010PHP

Since Aug 7Pushed 7y ago1 watchersCompare

[ Source](https://github.com/wangwendy/laravel-cors)[ Packagist](https://packagist.org/packages/cross/laravel-cors)[ RSS](/packages/cross-laravel-cors/feed)WikiDiscussions master Synced 2w ago

READMEChangelogDependenciesVersions (1)Used By (0)

Installation
------------

[](#installation)

composer.json

```
  "repositories": {
       ...

       "cross" : {
           "type": "composer",
           "url": "https://packagist.org"
       },

       ...
   }

```

Require the `cross/laravel-cors` package in your `composer.json` and update your dependencies:

```
$ composer require cross/laravel-cors dev-master
```

config/app.php

```

'providers' => [
    ...
    Cross\Cors\ServiceProvider::class,
    ...
],

'aliases' => [
    ...
    'cors' => Cross\Cors\FacadeCors::class,
    ...
]

```

App/Http/Kernel.php

```

$app->routeMiddleware([
    // ...
    'cors' => \Cross\Cors\HandleCors::class,
]);

```

Configuration
-------------

[](#configuration)

The defaults are set in `config/cors.php`. Copy this file to your own config directory to modify the values. You can publish the config using this command:

```
$ php artisan vendor:publish --provider="Cross\Cors\ServiceProvider"
```

> **Note:** When using custom headers, like `X-Auth-Token` or `X-Requested-With`, you must set the `allowedHeaders` to include those headers. You can also set it to `array('*')` to allow all custom headers.

> **Note:** If you are explicitly whitelisting headers, you must include `Origin` or requests will fail to be recognized as CORS.

```
return [
     /*
     |--------------------------------------------------------------------------
     | Laravel CORS
     |--------------------------------------------------------------------------
     |
     | allowedOrigins, allowedHeaders and allowedMethods can be set to array('*')
     | to accept any value.
     |
     */
    'supportsCredentials' => false,
    'allowedOrigins' => ['*'],
    'allowedHeaders' => ['Content-Type', 'X-Requested-With'],
    'allowedMethods' => ['*'], // ex: ['GET', 'POST', 'PUT',  'DELETE']
    'exposedHeaders' => [],
    'maxAge' => 0,
]
```

`allowedOrigins`, `allowedHeaders` and `allowedMethods` can be set to `array('*')` to accept any value.

License
-------

[](#license)

Released under the MIT License, see [LICENSE](LICENSE).

###  Health Score

20

—

LowBetter than 13% of packages

Maintenance20

Infrequent updates — may be unmaintained

Popularity5

Limited adoption so far

Community7

Small or concentrated contributor base

Maturity40

Maturing project, gaining track record

 Bus Factor1

Top contributor holds 100% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

### Community

Maintainers

![](https://avatars.githubusercontent.com/u/16145916?v=4)[wangwendy](/maintainers/wangwendy)[@wangwendy](https://github.com/wangwendy)

---

Top Contributors

[![wangwendy](https://avatars.githubusercontent.com/u/16145916?v=4)](https://github.com/wangwendy "wangwendy (11 commits)")

### Embed Badge

![Health badge](/badges/cross-laravel-cors/health.svg)

```
[![Health](https://phpackages.com/badges/cross-laravel-cors/health.svg)](https://phpackages.com/packages/cross-laravel-cors)
```

###  Alternatives

[php-http/cache-plugin

PSR-6 Cache plugin for HTTPlug

25025.5M80](/packages/php-http-cache-plugin)[illuminate/http

The Illuminate Http package.

11937.2M6.6k](/packages/illuminate-http)[rdkafka/rdkafka

A PHP extension for Kafka

2.2k20.0k1](/packages/rdkafka-rdkafka)[httpsoft/http-message

Strict and fast implementation of PSR-7 and PSR-17

87930.4k113](/packages/httpsoft-http-message)[mezzio/mezzio-router

Router subcomponent for Mezzio

265.3M84](/packages/mezzio-mezzio-router)[serpapi/google-search-results-php

Get Google, Bing, Baidu, Ebay, Yahoo, Yandex, Home depot, Naver, Apple, Duckduckgo, Youtube search results via SerpApi.com

69122.6k](/packages/serpapi-google-search-results-php)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)