CORS - Cross-Origin Resource Sharing (CORS)

Cross-Origin Resource Sharing (CORS) is an HTTP-header based mechanism that allows a server to
indicate any origins (domain, scheme, or port) other than its own from which a browser should permit
loading resources. CORS also relies on a mechanism by which browsers make a "preflight" request to the
server hosting the cross-origin resource, in order to check that the server will permit the actual request. In
that preflight, the browser sends headers that indicate the HTTP method and headers that will be used in
the actual request.

The CORS mechanism supports secure cross-origin requests and data transfers between browsers and servers.
Modern browsers use CORS in APIs such as XMLHttpRequest or Fetch to mitigate the risks of cross-origin HTTP
requests.

Prepared by: Christian I. Cabrera

 Enabling CORS in CodeIgniter 4^
Open your terminal and navigate to project directory. Key this command
composer require myth/auth

php spark make:filter CorsMiddleware

it will make CorsMiddleware.php file under the App\Filters directory

Add the following code under the before function.

header('Access-Control-Allow-Origin: *');
header('Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE');
header('Access-Control-Allow-Headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token');
return $request;

Then navigate to App\Config\Filters.php and add your new CORS middleware to the `$aliases` and `globals` array

public $aliases = [
'cors' => \App\Filters\CorsMiddleware::class,
];

public $globals = [
'before' => [
'cors', // Add 'cors' to apply CORS middleware globally
],
// ...
];

Prepared by: Christian I. Cabrera

Or simply navigate to public\index.php and add the following codes:
header('Access-Control-Allow-Origin: *');
header("Access-Control-Allow-Headers: X-API-KEY, Origin, X-Requested-With, Content-Type, Accept, Access-
Control-Request-Method");
header("Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE");
$method = $_SERVER['REQUEST_METHOD'];
if($method == "OPTIONS") {
die();
}

CI4 is all set. You can now access your ci4 as your backend

Prepared by: Christian I. Cabrera