config for CORS

diff --git a/app/config/config.yml b/app/config/config.yml
index 33db245808c686cb2a97d8b871c0f6525e7fdf1f..8e7258ea756264998c269c8a16190383b7e05157 100644 (file)
--- a/app/config/config.yml
+++ b/app/config/config.yml
@@ -104,3 +104,27 @@ fos_rest:
         default_format: json
 
 nelmio_api_doc: ~
+
+nelmio_cors:
+    defaults:
+        allow_credentials: false
+        allow_origin: []
+        allow_headers: []
+        allow_methods: []
+        expose_headers: []
+        max_age: 0
+        hosts: []
+        #origin_regex: false
+    paths:
+        '^/api/':
+            allow_origin: ['*']
+            allow_headers: ['X-Custom-Auth']
+            allow_methods: ['POST', 'PUT', 'GET', 'DELETE']
+            max_age: 3600
+        '^/':
+            #origin_regex: true
+            allow_origin: ['^http://localhost:[0-9]+']
+            allow_headers: ['X-Custom-Auth']
+            allow_methods: ['POST', 'PUT', 'GET', 'DELETE']
+            max_age: 3600
+            hosts: ['^api\.']