Reimplemented CORS handling (fixes #681)

middleware/CorsMiddleware.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace Grocy\Middleware;
+
+use Psr\Http\Message\ServerRequestInterface as Request;
+use Psr\Http\Server\RequestHandlerInterface as RequestHandler;
+use Psr\Http\Message\ResponseInterface as Response;
+use Slim\Routing\RouteContext;
+
+class CorsMiddleware extends BaseMiddleware
+{
+	public function __invoke(Request $request, RequestHandler $handler): Response
+	{
+		$response = $handler->handle($request);
+
+		$routeContext = RouteContext::fromRequest($request);
+		$routingResults = $routeContext->getRoutingResults();
+		$methods = $routingResults->getAllowedMethods();
+		//$requestHeaders = $request->getHeaderLine('Access-Control-Request-Headers');
+		$origin = $request->getHeaderLine('Origin');
+
+		$response = $handler->handle($request);
+
+		$response = $response->withHeader('Access-Control-Allow-Origin', $origin);
+		$response = $response->withHeader('Access-Control-Allow-Methods', implode(',', $methods));
+		$response = $response->withHeader('Access-Control-Allow-Headers', 'Content-Type,GROCY-API-KEY');
+
+		return $response;
+	}
+}