bug fixing

common/helpers/CorsCustom.php

@@ -0,0 +1,25 @@
+<?php
+
+namespace common\helpers;
+use Yii;
+
+use yii\filters\Cors;
+
+
+class CorsCustom extends Cors
+{
+
+    public function beforeAction($action){
+
+        parent::beforeAction($action);
+
+        if (Yii::$app->getRequest()->getMethod() === 'OPTIONS') {
+            Yii::$app->getResponse()->getHeaders()->set('Allow', 'POST GET PUT');
+            Yii::$app->end();
+        }
+
+        return true;
+
+    }
+
+}

customerapi/controllers/LoginController.php

@@ -8,6 +8,7 @@
 
 namespace customerapi\controllers;
 
+use common\helpers\CorsCustom;
 use customerapi\models\LoginForm;
 use sizeg\jwt\Jwt;
 use sizeg\jwt\JwtHttpBearerAuth;
@@ -25,7 +26,7 @@ class LoginController extends Controller
         $behaviors = parent::behaviors();
 
         $behaviors['corsFilter'] = [
-              'class' => \yii\filters\Cors::className(),
+              'class' => CorsCustom::class,
               'cors' => [
                   // restrict access to
                   'Origin' => ['https://botondfitness.hu'],

customerapi/controllers/RestController.php

@@ -3,6 +3,7 @@
 namespace customerapi\controllers;
 
 
+use common\helpers\CorsCustom;
 use common\models\Customer;
 use Exception;
 use Lcobucci\JWT\Token;
@@ -20,7 +21,7 @@ class RestController extends Controller
         $behaviors = parent::behaviors();
 
         $behaviors['corsFilter'] = [
-            'class' => Cors::class,
+            'class' => CorsCustom::class,
             'cors' => [
                 // restrict access to
                 'Origin' => ['https://botondfitness.hu'],