PHPackages eko3alpha/slim-cors-middleware - PHPackages - PHPackages [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register) 1. [Directory](/) 2. / 3. [HTTP & Networking](/categories/http) 4. / 5. eko3alpha/slim-cors-middleware ActiveLibrary[HTTP & Networking](/categories/http) eko3alpha/slim-cors-middleware ============================== Slim 3 CORS Multi-Origin Middleware 1.1.3(9y ago)439.4k2[1 issues](https://github.com/eko3alpha/slim-cors-middleware/issues)MITPHPPHP >=5.5.0 Since Apr 12Pushed 9y agoCompare [ Source](https://github.com/eko3alpha/slim-cors-middleware)[ Packagist](https://packagist.org/packages/eko3alpha/slim-cors-middleware)[ Docs](https://github.com/eko3alpha/slim-cors-middleware)[ RSS](/packages/eko3alpha-slim-cors-middleware/feed)WikiDiscussions master Synced 2w ago READMEChangelog (7)Dependencies (3)Versions (7)Used By (0) slim-cors-middleware ([Slim v3.x](https://github.com/slimphp/Slim/)) ==================================================================== [](#slim-cors-middleware-slim-v3x) [![Packagist](https://camo.githubusercontent.com/bcc77ada06d40965fc9d770a83d707273dd3b6eb782f3eb25475d3b1cb7650b1/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f762f656b6f33616c7068612f736c696d2d636f72732d6d6964646c65776172652e7376673f7374796c653d666c61742d737175617265)](https://packagist.org/packages/eko3alpha/slim-cors-middleware)[![Packagist](https://camo.githubusercontent.com/7acdb120d4c766da0b2255b6a1900f77ad6268f9571b3e5998fa1cb3fc821ec2/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f64742f656b6f33616c7068612f736c696d2d636f72732d6d6964646c65776172652e737667)](https://packagist.org/packages/eko3alpha/slim-cors-middleware)[![Scrutinizer Code Quality](https://camo.githubusercontent.com/6737bafc8311de53e201265ce7fc0ecf0d196a810ef72eacfd0e12f67c5c7c22/68747470733a2f2f7363727574696e697a65722d63692e636f6d2f672f656b6f33616c7068612f736c696d2d636f72732d6d6964646c65776172652f6261646765732f7175616c6974792d73636f72652e706e673f623d6d6173746572)](https://scrutinizer-ci.com/g/eko3alpha/slim-cors-middleware/?branch=master)[![Build Status](https://camo.githubusercontent.com/4dbbd50db92a49713c4ad1ce633cd41f75b257c5fad99c5a0f2db63d6362e227/68747470733a2f2f7472617669732d63692e6f72672f656b6f33616c7068612f736c696d2d636f72732d6d6964646c65776172652e7376673f6272616e63683d6d6173746572)](https://travis-ci.org/eko3alpha/slim-cors-middleware) A middleware to handle Cors for multiple domains using Slim. "Access-Contro-Allow-Origin" only accepts one domain or a wildcard. This makes it troublesome if you want to allow different domains access to your api. In order to allow access to multiple domains You either need to create an .htaccess/apache rule: [credit](https://stackoverflow.com/questions/1653308/access-control-allow-origin-multiple-origin-domains) ``` SetEnvIf Origin "^http(s)?:\/\/(www\.|dev\.|local\.)?(domain\.com|domain2\.com)$" AccessControlAllowOrigin=$0 Header add Access-Control-Allow-Origin %{AccessControlAllowOrigin}e env=AccessControlAllowOrigin ``` Or you have to use a wildcard. It's an all or very restrictive approach, which encourage most dev's to opt for the very easy wildcard '\*' approach. ``` Access-Control-Allow-Origin: * ``` This middleware will detect the origin of a request, if its within the allowed list it will set the proper "Access-Control-Allow-Origin" value for that domain, as well as restrict the methods it has access to. ``` Access-Control-Allow-Origin: https://client.domain.com ``` Install ------- [](#install) You can either download manually or use composer. ``` composer require eko3alpha/slim-cors-middleware ``` Usage ----- [](#usage) ``` $app = new \Slim\App(); $app->add(new \Eko3alpha\Slim\Middleware\CorsMiddleware([ 'https://dev.domain1.com' => ['GET', 'POST'], 'https://dev.domain2.com' => ['GET', 'POST'], 'https://dev.domain3.com' => ['GET'] ]); ``` Examples -------- [](#examples) This middleware allows you to add method restrictions on a per domain basis. Below are some examples of valid configuration options. HTTP and HTTPS are considered 2 different origins. One entry with a wildcard, this will give GET access to all domains requesting resources ``` $app->add(new \Eko3alpha\Slim\Middleware\CorsMiddleware([ '*' => 'GET' ]); ``` This will give GET, POST and DELETE access to both http and https versions of api.domain.com, you can either use a string value or array. ``` $app->add(new \Eko3alpha\Slim\Middleware\CorsMiddleware([ 'http://client.domain.com' => 'GET, POST, DELETE', 'https://client.domain.com' => ['GET', 'POST', 'DELETE'] ]); ``` You can either choose to have your methods as an array \['GET', 'POST'\] or string 'GET, POST'. Slim Container -------------- [](#slim-container) You can use Slim's container to hold the configuration if you prefer to have your configuration in a seperate file. ``` $container = new Slim\Container; . . . $container['cors'] = ['*' => 'GET, POST']; . . . $app->add(new \Eko3alpha\Slim\Middleware\CorsMiddleware($container['cors']); ``` ### Health Score 32 — LowBetter than 69% of packages Maintenance15 Infrequent updates — may be unmaintained Popularity29 Limited adoption so far Community7 Small or concentrated contributor base Maturity62 Established project with proven stability Bus Factor1 Top contributor holds 100% of commits — single point of failure How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window. **Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores. **Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement. **Maturity (30%)** — Project age, version count, PHP version support, and release stability. ### Release Activity Cadence Every ~0 days Total 6 Last Release 3410d ago Major Versions 0.1.1 → 1.0.02017-04-12 ### Community Maintainers ![](https://avatars.githubusercontent.com/u/1705908?v=4)[Angel Alvarado](/maintainers/eko3alpha)[@eko3alpha](https://github.com/eko3alpha) --- Top Contributors [![eko3alpha](https://avatars.githubusercontent.com/u/1705908?v=4)](https://github.com/eko3alpha "eko3alpha (19 commits)") --- Tags psr-7middlewarecorsslim ### Code Quality TestsPHPUnit ### Embed Badge ![Health badge](/badges/eko3alpha-slim-cors-middleware/health.svg) ``` [![Health](https://phpackages.com/badges/eko3alpha-slim-cors-middleware/health.svg)](https://phpackages.com/packages/eko3alpha-slim-cors-middleware) ``` ### Alternatives [guzzlehttp/psr7 PSR-7 message implementation that also provides common utility methods 7.9k1.1B4.4k](/packages/guzzlehttp-psr7)[mezzio/mezzio PSR-15 Middleware Microframework 3973.9M133](/packages/mezzio-mezzio)[tuupola/cors-middleware PSR-7 and PSR-15 CORS middleware 1331.9M33](/packages/tuupola-cors-middleware)[mezzio/mezzio-authentication-oauth2 OAuth2 (server) authentication middleware for Mezzio and PSR-7 applications. 28655.7k4](/packages/mezzio-mezzio-authentication-oauth2)[gofabian/negotiation-middleware PHP negotiation middleware for accept headers of PSR-7 requests. Uses the negotiation library willdurand/negotiation. 1081.5k](/packages/gofabian-negotiation-middleware)[bairwell/middleware-cors A PSR-7 middleware layer for providing CORS (Cross Origin Request Security) headers and security provisions. Instead of just allowing invalid CORs requests to come through, this middleware actively blocks them after validating. 1821.8k1](/packages/bairwell-middleware-cors) PHPackages © 2026 [Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)