Route Middleware not work

[shotoreaper]

Hi!

This is my code, but not work:

require ('.././libs/CorsSlim/vendor/autoload.php');
$app = new \Slim\Slim();

$app->post('/item', 
          \CorsSlim\CorsSlim::routeMiddleware(), 
          function () use ($app) {
            $r = json_decode($app->request->getBody());
            $response["status"] = "success";
            $response["message"] = $r->data->nickname;
            echoResponse(200, $response);
          }
        );

The error:

XMLHttpRequest cannot load [...]. No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://localhost' is therefore not allowed access.

If I use this code, it works. But I need apply only in one route:

require ('.././libs/CorsSlim/vendor/autoload.php');
$app = new \Slim\Slim();

$corsOptions = array(
    "origin" => "*",
    "exposeHeaders" => array("X-My-Custom-Header", "X-Another-Custom-Header"),
    "maxAge" => 1728000,
    "allowCredentials" => True,
    "allowMethods" => array("POST, GET"),
    "allowHeaders" => array("Origin, X-Requested-With, Content-Type, Accept")
    );

$cors = new \CorsSlim\CorsSlim($corsOptions);
$app->post('/item',
          function () use ($app) {
            $r = json_decode($app->request->getBody());
            $response["status"] = "success";
            $response["message"] = $r->data->nickname;
            echoResponse(200, $response);
          }
        );

$app->add($cors);

[palanik]

Your code looks ok and I am able to run it locally with correct cors response.

Could you add $corsOptions to routeMiddleware() and try.

\CorsSlim\CorsSlim::routeMiddleware($corsOptions)

[shotoreaper]

Nothing, I get the same error:
XMLHttpRequest cannot load [...]. No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://localhost' is therefore not allowed access.

The code:

$corsOptions = array(
    "origin" => "*",
    "exposeHeaders" => array("X-My-Custom-Header", "X-Another-Custom-Header"),
    "maxAge" => 1728000,
    "allowCredentials" => True,
    "allowMethods" => array("POST, GET"),
    "allowHeaders" => array("Origin, X-Requested-With, Content-Type, Accept, Authorization")
    );

$app->post('/item',
          \CorsSlim\CorsSlim::routeMiddleware($corsOptions),
          function () use ($app) {
            /*$r = json_decode($app->request->getBody());
            $response["status"] = "success";
            $response["message"] = "motherfucker";
            echoResponse(200, $response);*/
          }
        );

[palanik]

The issue is with pre-flight call.

With routeMiddleware you have to explicitly support OPTIONS calls for Preflighted requests, like this:

$app->options('/item',
              \CorsSlim\CorsSlim::routeMiddleware(),
              function () use ($app) {}
              );

No need to return any response.