Settings for NelmioCORSBundle that ended hours of misery

gistfile1.txt

# app/config/config.yml


# The part that saved me was:
# 1: My quotes didn't wrap every header type in allow_headers
# 2: hosts: has to be set to the domain making the request.
nelmio_cors:
    defaults:
        allow_credentials: true
        allow_origin: ['*']
        allow_headers: ['Authorization', 'Origin', 'Content-Type', 'Accept', 'X-Requested-With']
        allow_methods: ['GET', 'POST', 'PUT', 'PATCH', 'OPTIONS']
        #allow_methods: []
        expose_headers: ['*']
        max_age: 0
        hosts: ['domain.com']
    paths:
        '^/':