php-api/src
darbs-claude d6c00e4ba8
Some checks failed
CI / PHP 8.2 (pull_request) Failing after 1s
CI / PHP 8.4 (pull_request) Failing after 1s
CI / Assets (pull_request) Failing after 1s
CI / PHP 8.3 (pull_request) Failing after 1s
test(cors): add comprehensive PublicApiCors middleware tests (#8)
Tests cover:
- OPTIONS preflight returns 204 with no body and skips next handler
- CORS headers added to GET/POST responses
- Origin header echoed back; wildcard used when absent
- Correct allowed methods (GET, POST, OPTIONS)
- Correct allowed headers (Content-Type, Accept, X-Requested-With)
- Rate limit headers exposed to browser clients
- Max-Age 3600 and Vary: Origin for correct cache behaviour
- Access-Control-Allow-Credentials intentionally absent (security boundary)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-02-20 23:49:17 +00:00
..
Api test(cors): add comprehensive PublicApiCors middleware tests (#8) 2026-02-20 23:49:17 +00:00
Website/Api monorepo sepration 2026-01-26 20:57:08 +00:00