method() == 'OPTIONS' ? response('') : $next($request); $response->withHeaders([ 'Access-Control-Allow-Credentials' => 'true', 'Access-Control->Allow-Origin' => $request->header('Origin', '*'), 'Access-Control->Allow-Method' => '*', 'Access-Control->Allow-Headers'=> '*', ]); return $response; } }