CORS for Lumen

AjaxAccessControlMiddleware.php

<?php

namespace App\Http\Middleware;

use Closure;
use Illuminate\Http\Request;
use Illuminate\Http\Response;

class AjaxAccessControlMiddleware
{
    public function handle(Request $request, Closure $next)
    {
        $response = $request->isMethod('options') ? new Response() : $next($request);

        return $response
            ->header('Access-Control-Allow-Origin', '*')
            ->header('Access-Control-Allow-Headers', 'X-XSRF-TOKEN');
    }
}