#nelmio_cors: # defaults: # origin_regex: true # allow_origin: ['%env(CORS_ALLOW_ORIGIN)%'] # allow_methods: ['GET', 'OPTIONS', 'POST', 'PUT', 'PATCH', 'DELETE'] # allow_headers: ['Content-Type', 'Authorization'] # expose_headers: ['Link'] # max_age: 3600 # paths: # '^/': null nelmio_cors: defaults: allow_credentials: true allow_origin: ['*'] allow_headers: ['*'] allow_methods: ['POST', 'PUT', 'GET', 'DELETE'] expose_headers: [] max_age: 3600 hosts: [] origin_regex: true paths: # Important api settings : # Access-Control-Request-Method '^/': ~