api cors

frontend/modules/api/controllers/ApiController.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace frontend\modules\api\controllers;
+
+use common\behaviors\GsCors;
+use yii\rest\Controller;
+
+class ApiController extends Controller
+{
+
+    public function behaviors()
+    {
+        return [
+            'corsFilter' => [
+                'class' => GsCors::class,
+                'cors' => [
+                    'Origin' => ['*'],
+                    //'Access-Control-Allow-Credentials' => true,
+                    'Access-Control-Allow-Headers' => [
+                        'Content-Type',
+                        'Access-Control-Allow-Headers',
+                        'Authorization',
+                        'X-Requested-With'
+                    ],
+                ]
+            ],
+        ];
+    }
+
+}