update inbox list

vendor/fruitcake/laravel-cors/readme.md

@@ -0,0 +1,165 @@
+# CORS Middleware for Laravel
+
+[![Software License][ico-license]](LICENSE.md)
+[![Build Status][ico-travis]][link-travis]
+[![Total Downloads][ico-downloads]][link-downloads]
+
+Based on https://github.com/asm89/stack-cors
+
+## About
+
+The `laravel-cors` package allows you to send [Cross-Origin Resource Sharing](http://enable-cors.org/)
+headers with Laravel middleware configuration.
+
+If you want to have a global overview of CORS workflow, you can  browse
+this [image](http://www.html5rocks.com/static/images/cors_server_flowchart.png).
+
+## Upgrading from 0.x
+When upgrading from 0.x versions, there are some breaking changes:
+ - The vendor name has changed (see installation/usage)
+ - Group middleware is no longer supported.
+ - A new 'paths' property is used to enable/disable CORS on certain routes. This is empty by default!
+ - The casing on the props in `cors.php` has changed from camelCase to snake_case, so if you already have a `cors.php` file you will need to update the props in there to match the new casing.
+
+## Features
+
+* Handles CORS pre-flight OPTIONS requests
+* Adds CORS headers to your responses
+* Match routes to only add CORS to certain Requests
+
+## Installation
+
+Require the `fruitcake/laravel-cors` package in your `composer.json` and update your dependencies:
+```sh
+composer require fruitcake/laravel-cors
+```
+
+## Global usage
+
+To allow CORS for all your routes, add the `HandleCors` middleware in the `$middleware` property of  `app/Http/Kernel.php` class:
+
+```php
+protected $middleware = [
+    // ...
+    \Fruitcake\Cors\HandleCors::class,
+];
+```
+
+Now update the config to define the paths you want to run the CORS service on, (see Configuration below):
+
+```php 
+'paths' => ['api/*'],
+```
+
+## Configuration
+
+The defaults are set in `config/cors.php`. Publish the config to copy the file to your own config:
+```sh
+php artisan vendor:publish --tag="cors"
+```
+> **Note:** When using custom headers, like `X-Auth-Token` or `X-Requested-With`, you must set the `allowed_headers` to include those headers. You can also set it to `['*']` to allow all custom headers.
+
+> **Note:** If you are explicitly whitelisting headers, you must include `Origin` or requests will fail to be recognized as CORS.
+
+    
+```php
+<?php
+
+return [
+
+    /*
+     * You can enable CORS for 1 or multiple paths.
+     * Example: ['api/*']
+     */
+    'paths' => [],
+
+    /*
+    * Matches the request method. `[*]` allows all methods.
+    */
+    'allowed_methods' => ['*'],
+
+    /*
+     * Matches the request origin. `[*]` allows all origins.
+     */
+    'allowed_origins' => ['*'],
+
+    /*
+     * Matches the request origin with, similar to `Request::is()`
+     */
+    'allowed_origins_patterns' => [],
+
+    /*
+     * Sets the Access-Control-Allow-Headers response header. `[*]` allows all headers.
+     */
+    'allowed_headers' => ['*'],
+
+    /*
+     * Sets the Access-Control-Expose-Headers response header.
+     */
+    'exposed_headers' => false,
+
+    /*
+     * Sets the Access-Control-Max-Age response header.
+     */
+    'max_age' => false,
+
+    /*
+     * Sets the Access-Control-Allow-Credentials header.
+     */
+    'supports_credentials' => false,
+];
+
+```
+
+`allowed_origins`, `allowed_headers` and `allowed_methods` can be set to `['*']` to accept any value.
+
+> **Note:** Try to be a specific as possible. You can start developing with loose constraints, but it's better to be as strict as possible!
+
+> **Note:** Because of [http method overriding](http://symfony.com/doc/current/reference/configuration/framework.html#http-method-override) in Laravel, allowing POST methods will also enable the API users to perform PUT and DELETE requests as well.
+
+### Lumen
+
+On Laravel Lumen, just register the ServiceProvider manually:
+
+```php
+$app->register(\Fruitcake\Cors\CorsServiceProvider::class);
+```
+
+## Global usage for Lumen
+To allow CORS for all your routes, add the `HandleCors` middleware to the global middleware and set the `paths` property in the config.
+```php
+$app->middleware([
+    // ...
+    \Fruitcake\Cors\HandleCors::class,
+]);
+```
+
+### Disabling CSRF protection for your API
+
+If possible, use a different route group with CSRF protection enabled. 
+Otherwise you can disable CSRF for certain requests in `App\Http\Middleware\VerifyCsrfToken`:
+
+```php
+protected $except = [
+    'api/*'
+];
+```
+    
+## License
+
+Released under the MIT License, see [LICENSE](LICENSE).
+
+[ico-version]: https://img.shields.io/packagist/v/fruitcake/laravel-cors.svg?style=flat-square
+[ico-license]: https://img.shields.io/badge/license-MIT-brightgreen.svg?style=flat-square
+[ico-travis]: https://img.shields.io/travis/fruitcake/laravel-cors/master.svg?style=flat-square
+[ico-scrutinizer]: https://img.shields.io/scrutinizer/coverage/g/fruitcake/laravel-cors.svg?style=flat-square
+[ico-code-quality]: https://img.shields.io/scrutinizer/g/fruitcake/laravel-cors.svg?style=flat-square
+[ico-downloads]: https://img.shields.io/packagist/dt/fruitcake/laravel-cors.svg?style=flat-square
+
+[link-packagist]: https://packagist.org/packages/fruitcake/laravel-cors
+[link-travis]: https://travis-ci.org/fruitcake/laravel-cors
+[link-scrutinizer]: https://scrutinizer-ci.com/g/fruitcake/laravel-cors/code-structure
+[link-code-quality]: https://scrutinizer-ci.com/g/fruitcake/laravel-cors
+[link-downloads]: https://packagist.org/packages/fruitcake/laravel-cors
+[link-author]: https://github.com/fruitcake
+[link-contributors]: ../../contributors