PHPackages                             cross/laravel-cors - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [HTTP & Networking](/categories/http)
4. /
5. cross/laravel-cors

ActiveLibrary[HTTP & Networking](/categories/http)

cross/laravel-cors
==================

Adds CORS (Cross-Origin Resource Sharing) headers support in your Laravel application

010PHP

Since Aug 7Pushed 7y ago1 watchersCompare

[ Source](https://github.com/wangwendy/laravel-cors)[ Packagist](https://packagist.org/packages/cross/laravel-cors)[ RSS](/packages/cross-laravel-cors/feed)WikiDiscussions master Synced today

READMEChangelogDependenciesVersions (1)Used By (0)

Installation
------------

[](#installation)

composer.json

```
  "repositories": {
       ...

       "cross" : {
           "type": "composer",
           "url": "https://packagist.org"
       },

       ...
   }

```

Require the `cross/laravel-cors` package in your `composer.json` and update your dependencies:

```
$ composer require cross/laravel-cors dev-master
```

config/app.php

```

'providers' => [
    ...
    Cross\Cors\ServiceProvider::class,
    ...
],

'aliases' => [
    ...
    'cors' => Cross\Cors\FacadeCors::class,
    ...
]

```

App/Http/Kernel.php

```

$app->routeMiddleware([
    // ...
    'cors' => \Cross\Cors\HandleCors::class,
]);

```

Configuration
-------------

[](#configuration)

The defaults are set in `config/cors.php`. Copy this file to your own config directory to modify the values. You can publish the config using this command:

```
$ php artisan vendor:publish --provider="Cross\Cors\ServiceProvider"
```

> **Note:** When using custom headers, like `X-Auth-Token` or `X-Requested-With`, you must set the `allowedHeaders` to include those headers. You can also set it to `array('*')` to allow all custom headers.

> **Note:** If you are explicitly whitelisting headers, you must include `Origin` or requests will fail to be recognized as CORS.

```
return [
     /*
     |--------------------------------------------------------------------------
     | Laravel CORS
     |--------------------------------------------------------------------------
     |
     | allowedOrigins, allowedHeaders and allowedMethods can be set to array('*')
     | to accept any value.
     |
     */
    'supportsCredentials' => false,
    'allowedOrigins' => ['*'],
    'allowedHeaders' => ['Content-Type', 'X-Requested-With'],
    'allowedMethods' => ['*'], // ex: ['GET', 'POST', 'PUT',  'DELETE']
    'exposedHeaders' => [],
    'maxAge' => 0,
]
```

`allowedOrigins`, `allowedHeaders` and `allowedMethods` can be set to `array('*')` to accept any value.

License
-------

[](#license)

Released under the MIT License, see [LICENSE](LICENSE).

###  Health Score

20

—

LowBetter than 14% of packages

Maintenance20

Infrequent updates — may be unmaintained

Popularity5

Limited adoption so far

Community7

Small or concentrated contributor base

Maturity40

Maturing project, gaining track record

 Bus Factor1

Top contributor holds 100% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

### Community

Maintainers

![](https://www.gravatar.com/avatar/252dc79e4cc8a367bb21e2581442a2555be50c1e517d79b9850493dd0e7d5622?d=identicon)[wangwendy](/maintainers/wangwendy)

---

Top Contributors

[![wangwendy](https://avatars.githubusercontent.com/u/16145916?v=4)](https://github.com/wangwendy "wangwendy (11 commits)")

### Embed Badge

![Health badge](/badges/cross-laravel-cors/health.svg)

```
[![Health](https://phpackages.com/badges/cross-laravel-cors/health.svg)](https://phpackages.com/packages/cross-laravel-cors)
```

###  Alternatives

[friendsofsymfony/rest-bundle

This Bundle provides various tools to rapidly develop RESTful API's with Symfony

2.8k73.3M319](/packages/friendsofsymfony-rest-bundle)[php-http/discovery

Finds and installs PSR-7, PSR-17, PSR-18 and HTTPlug implementations

1.3k309.5M1.2k](/packages/php-http-discovery)[nyholm/psr7

A fast PHP7 implementation of PSR-7

1.3k235.4M2.4k](/packages/nyholm-psr7)[pusher/pusher-php-server

Library for interacting with the Pusher REST API

1.5k94.8M293](/packages/pusher-pusher-php-server)[spatie/crawler

Crawl all internal links found on a website

2.8k16.3M52](/packages/spatie-crawler)[react/http

Event-driven, streaming HTTP client and server implementation for ReactPHP

78126.4M414](/packages/react-http)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)