Fix issue reported by phpstan in CrossDomainMiddleware

This commit is contained in:
Alejandro Celaya 2025-10-16 10:08:24 +02:00
parent 774a579a94
commit 648696f778

View File

@ -39,12 +39,10 @@ readonly class CrossDomainMiddleware implements MiddlewareInterface, RequestMeth
private function addOptionsHeaders(ServerRequestInterface $request, ResponseInterface $response): ResponseInterface
{
// Options requests should always be empty and have a 204 status code
return EmptyResponse::withHeaders([
...$response->getHeaders(),
'Access-Control-Allow-Methods' => $this->resolveCorsAllowedMethods($response),
'Access-Control-Allow-Headers' => $request->getHeaderLine('Access-Control-Request-Headers'),
'Access-Control-Max-Age' => $this->options->maxAge,
]);
return EmptyResponse::withHeaders($response->getHeaders())
->withHeader('Access-Control-Allow-Methods', $this->resolveCorsAllowedMethods($response))
->withHeader('Access-Control-Allow-Headers', $request->getHeaderLine('Access-Control-Request-Headers'))
->withHeader('Access-Control-Max-Age', (string) $this->options->maxAge);
}
private function resolveCorsAllowedMethods(ResponseInterface $response): string