grocy/middleware/JsonMiddleware.php

<?php

namespace Grocy\Middleware;

use Psr\Http\Message\ServerRequestInterface as Request;
use Psr\Http\Server\RequestHandlerInterface as RequestHandler;
use Psr\Http\Message\ResponseInterface as Response;

class JsonMiddleware extends BaseMiddleware
{
	public function __invoke(Request $request, RequestHandler $handler): Response
	{
		$response = $handler->handle($request);

		if ($response->hasHeader('Content-Disposition'))
		{
			return $response;
		}
		else
		{
			// TODO: This belongs more to CorsMiddleware, but that handles currently OPTIONS (CORS preflight) requests...
			$response = $response->withHeader('Access-Control-Allow-Origin', '*');

			$response = $response->withHeader('Content-Type', 'application/json');

			return $response;
		}
	}
}