add cors filter for mobileapi

mobileapi/components/ActivatedFilter.php

@@ -31,15 +31,16 @@ class ActivatedFilter extends ActionFilter
             // get the device
             /** @var MobileDevice $mobileDevice */
             $mobileDevice = \Yii::$app->user->getIdentity();
+            $deviceId = null;
             if (isset($mobileDevice)) {
+                $deviceId = $mobileDevice->id;
                 $idCard = $mobileDevice->id_card;
                 // find out if the device is activated
                 $activated = $mobileDevice->status === MobileDevice::STATUS_ACTIVE;
             }
-
             // if device is not activated, throw exception with http status 412
             if ($activated === false) {
-                throw new HttpException( HttpStatus::PRECONDITION_FAILED,"Device is not activated: " . $mobileDevice->id);
+                throw new HttpException( HttpStatus::PRECONDITION_FAILED,"Device is not activated: " . $deviceId);
             }
         } catch (HttpException $e) {
             if ($e->statusCode === HttpStatus::PRECONDITION_FAILED && $this->isOptional($action)) {

mobileapi/components/CorsFilter.php

@@ -0,0 +1,89 @@
+<?php
+
+namespace mobileapi\components;
+
+
+use yii\base\Action;
+use yii\base\ActionFilter;
+use yii\helpers\StringHelper;
+
+
+class CorsFilter extends ActionFilter
+{
+    /**
+     * @var array list of action IDs that this filter will be skipped.
+     * Defaults to empty, meaning authentication is not skipped for any action.
+     * @since 2.0.7
+     */
+    public $skip = [];
+    public $allowedOrigins = [
+        'http://localhost', 'capacitor://localhost', 'http://localhost:86'
+    ];
+
+    private $request;
+    private $response;
+
+
+    public function beforeAction($action)
+    {
+        // if action must be skipped, do nothing
+        if ( $this->isSkip($action)){
+            return true;
+        }
+        $this->request = \Yii::$app->getRequest();
+        $this->response = \Yii::$app->getResponse();
+        $origin = $this->request->headers->get('origin');
+        \Yii::error("origin", $origin);
+
+        $isOriginAllowed = array_search($origin, $this->allowedOrigins, true);
+        if ($isOriginAllowed >= 0) {
+            $this->response->headers->set(
+                'Access-Control-Allow-Origin', $origin
+            );
+
+            $headers = [
+                'Access-Control-Allow-Headers' => 'Content-Type, content-type, Authorization, Origin',
+                'Access-Control-Allow-Credentials' => true,
+                ];
+            foreach ($headers as $headerName => $headerValue ){
+                if ( $headerValue === true ){
+                    $headerValue = 'true';
+                } else if ( $headerValue === false ){
+                    $headerValue = 'false';
+                }
+                $this->response->headers->set(
+                    $headerName, $headerValue
+                );
+            }
+        }
+
+        if ($this->request->isOptions && $this->request->headers->has('Access-Control-Request-Method')) {
+            // it is CORS preflight request, respond with 200 OK without further processing
+            $this->response->setStatusCode(200);
+            return false;
+        }
+        return true;
+    }
+
+    /**
+     * Checks, whether filter must be skipped for the given action.
+     *
+     * @param Action $action action to be checked.
+     * @return bool whether filter must be skipped.
+     * @see optional
+     * @since 2.0.7
+     */
+    protected function isSkip($action)
+    {
+        $id = $this->getActionId($action);
+        foreach ($this->skip as $pattern) {
+            if (StringHelper::matchWildcard($pattern, $id)) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+
+
+}