{"id":3811,"date":"2026-11-08T15:40:58","date_gmt":"2026-11-08T06:40:58","guid":{"rendered":"https:\/\/qol-kk.com\/wp2\/?p=3811"},"modified":"2026-11-08T15:40:58","modified_gmt":"2026-11-08T06:40:58","slug":"20260914-00mu0ku2","status":"publish","type":"post","link":"https:\/\/qol-kk.com\/wp2\/blog\/2026\/11\/08\/20260914-00mu0ku2\/","title":{"rendered":"Laravel CORS\u306e\u8a2d\u5b9a\u3092\u7406\u89e3\u3059\u308b\uff1a\u30d5\u30ed\u30f3\u30c8\u3068API\u3092\u5206\u96e2\u3059\u308b\u3068\u304d\u306e\u843d\u3068\u3057\u7a74"},"content":{"rendered":"<h2>\u6982\u8981<\/h2>\n<p>SPA\uff08React \/ Vue \u306a\u3069\uff09\u3068Laravel API\u3092\u5225\u30aa\u30ea\u30b8\u30f3\u3067\u904b\u7528\u3059\u308b\u3068\u3001\u30d6\u30e9\u30a6\u30b6\u306eCORS\uff08Cross-Origin Resource Sharing\uff09\u306b\u5fc5\u305a\u3076\u3064\u304b\u308a\u307e\u3059\u3002\u300c\u30ed\u30fc\u30ab\u30eb\u3067\u306f\u52d5\u304f\u306e\u306b\u672c\u756a\u3067 <code>blocked by CORS policy<\/code> \u304c\u51fa\u308b\u300d\u300c\u8a8d\u8a3c\u4ed8\u304d\u30ea\u30af\u30a8\u30b9\u30c8\u3060\u3051\u843d\u3061\u308b\u300d\u300c\u30d7\u30ea\u30d5\u30e9\u30a4\u30c8\u304c419\u306b\u306a\u308b\u300d\u2014\u2014\u3053\u308c\u3089\u306f\u8a2d\u5b9a\u306e\u4e00\u90e8\u3060\u3051\u3092\u76f4\u3057\u3066\u6b8b\u308a\u3092\u898b\u843d\u3068\u3059\u3068\u518d\u767a\u3057\u307e\u3059\u3002<\/p>\n<p>\u672c\u8a18\u4e8b\u3067\u306f\u3001Laravel\u306e <code>config\/cors.php<\/code> \u3092\u8ef8\u306b\u3001CORS\u304c\u5b9f\u969b\u306b\u3069\u3046\u52d5\u304f\u306e\u304b\u3001\u305d\u3057\u3066\u30d5\u30ed\u30f3\u30c8\u3068API\u3092\u5206\u96e2\u3059\u308b\u3068\u304d\u306b\u8e0f\u307f\u3084\u3059\u3044\u843d\u3068\u3057\u7a74\u3092\u3001\u539f\u56e0\u3068\u78ba\u8a8d\u65b9\u6cd5\u3064\u304d\u3067\u6574\u7406\u3057\u307e\u3059\u3002<\/p>\n<h2>\u74b0\u5883<\/h2>\n<ul>\n<li>PHP 8.2<\/li>\n<li>Laravel 10 \/ 11\uff08CORS\u51e6\u7406\u306f Laravel 9.2 \u4ee5\u964d\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u672c\u4f53\u306e <code>Illuminate\\Http\\Middleware\\HandleCors<\/code> \u306b\u7d71\u5408\u6e08\u307f\uff09<\/li>\n<li>\u30d5\u30ed\u30f3\u30c8: \u5225\u30aa\u30ea\u30b8\u30f3\u3067\u52d5\u4f5c\u3059\u308bSPA\uff08\u4f8b: <code>https:\/\/app.example.com<\/code>\uff09<\/li>\n<li>API: <code>https:\/\/api.example.com<\/code><\/li>\n<li>\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb: <code>config\/cors.php<\/code><\/li>\n<\/ul>\n<h2>\u767a\u751f\u3057\u305f\u554f\u984c<\/h2>\n<p>\u30d6\u30e9\u30a6\u30b6\u306e\u30b3\u30f3\u30bd\u30fc\u30eb\u306b\u6b21\u306e\u3088\u3046\u306a\u30a8\u30e9\u30fc\u304c\u51fa\u3066\u3001API\u30ea\u30af\u30a8\u30b9\u30c8\u304c\u5931\u6557\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"lang:default decode:true\">Access to fetch at 'https:\/\/api.example.com\/api\/user'\nfrom origin 'https:\/\/app.example.com' has been blocked by CORS policy:\nNo 'Access-Control-Allow-Origin' header is present on the requested resource.<\/pre>\n<p>\u5178\u578b\u7684\u306a\u30d1\u30bf\u30fc\u30f3\u306f\u4ee5\u4e0b\u3067\u3059\u3002<\/p>\n<ol>\n<li><code>GET<\/code> \u306f\u901a\u308b\u306e\u306b <code>POST<\/code> \/ <code>PUT<\/code> \/ <code>DELETE<\/code> \u304c\u901a\u3089\u306a\u3044<\/li>\n<li>\u8a8d\u8a3c\u60c5\u5831\uff08Cookie\uff09\u3092\u9001\u308b\u30ea\u30af\u30a8\u30b9\u30c8\u3060\u3051\u5931\u6557\u3059\u308b<\/li>\n<li>\u30d7\u30ea\u30d5\u30e9\u30a4\u30c8\uff08<code>OPTIONS<\/code>\uff09\u304c <code>419<\/code> \u3084 <code>404<\/code> \u306b\u306a\u308b<\/li>\n<li>\u30ed\u30fc\u30ab\u30eb\u306f\u901a\u308b\u304c\u672c\u756a\u3060\u3051\u5931\u6557\u3059\u308b<\/li>\n<\/ol>\n<h2>\u539f\u56e0<\/h2>\n<h3>CORS\u306f\u30b5\u30fc\u30d0\u3067\u306f\u306a\u304f\u30d6\u30e9\u30a6\u30b6\u304c\u5f37\u5236\u3059\u308b<\/h3>\n<p>CORS\u306f\u300c\u30b5\u30fc\u30d0\u304c\u5f3e\u3044\u3066\u3044\u308b\u300d\u308f\u3051\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002<strong>\u30b5\u30fc\u30d0\u306f\u666e\u901a\u306b\u30ec\u30b9\u30dd\u30f3\u30b9\u3092\u8fd4\u3057\u3066\u3044\u308b\u304c\u3001\u30d6\u30e9\u30a6\u30b6\u304c <code>Access-Control-Allow-Origin<\/code> \u30d8\u30c3\u30c0\u3092\u898b\u3066\u3001\u6761\u4ef6\u3092\u6e80\u305f\u3055\u306a\u3051\u308c\u3070JS\u304b\u3089\u306e\u30ec\u30b9\u30dd\u30f3\u30b9\u53c2\u7167\u3092\u906e\u65ad\u3057\u3066\u3044\u308b<\/strong>\u306e\u3067\u3059\u3002curl\u3067\u53e9\u304f\u3068\u6210\u529f\u3059\u308b\u306e\u306b\u30d6\u30e9\u30a6\u30b6\u3060\u3068\u5931\u6557\u3059\u308b\u306e\u306f\u3053\u306e\u305f\u3081\u3067\u3059\u3002<\/p>\n<h3>\u30d7\u30ea\u30d5\u30e9\u30a4\u30c8\uff08preflight\uff09\u306e\u5b58\u5728<\/h3>\n<p><code>Content-Type: application\/json<\/code> \u3092\u4f34\u3046 <code>POST<\/code> \u3084\u3001\u30ab\u30b9\u30bf\u30e0\u30d8\u30c3\u30c0\uff08<code>Authorization<\/code> \u306a\u3069\uff09\u3092\u542b\u3080\u30ea\u30af\u30a8\u30b9\u30c8\u306f\u300c\u5358\u7d14\u30ea\u30af\u30a8\u30b9\u30c8\u300d\u3067\u306f\u306a\u3044\u305f\u3081\u3001\u30d6\u30e9\u30a6\u30b6\u306f\u672c\u756a\u30ea\u30af\u30a8\u30b9\u30c8\u306e\u524d\u306b <code>OPTIONS<\/code> \u30e1\u30bd\u30c3\u30c9\u3067<strong>\u30d7\u30ea\u30d5\u30e9\u30a4\u30c8<\/strong>\u3092\u9001\u308a\u307e\u3059\u3002<code>GET<\/code> \u306f\u901a\u308b\u306e\u306b <code>POST<\/code> \u3060\u3051\u843d\u3061\u308b\u306e\u306f\u3001\u591a\u304f\u306e\u5834\u5408\u3053\u306e\u30d7\u30ea\u30d5\u30e9\u30a4\u30c8\u304c\u6b63\u3057\u304f\u51e6\u7406\u3055\u308c\u3066\u3044\u306a\u3044\u304b\u3089\u3067\u3059\u3002<\/p>\n<h3><code>paths<\/code> \u306e\u6307\u5b9a\u6f0f\u308c<\/h3>\n<pre class=\"lang:default decode:true\">\/\/ config\/cors.php\n'paths' =&gt; ['api\/*'],<\/pre>\n<p>\u3053\u306e\u8a2d\u5b9a\u3060\u3068 <code>\/api\/user<\/code> \u306b\u306fCORS\u30d8\u30c3\u30c0\u304c\u4ed8\u304d\u307e\u3059\u304c\u3001<code>\/login<\/code> \u3084 <code>\/sanctum\/csrf-cookie<\/code> \u306b\u306f\u4ed8\u304d\u307e\u305b\u3093\u3002Laravel Sanctum\u3067\u30af\u30c3\u30ad\u30fc\u8a8d\u8a3c\u3092\u4f7f\u3046\u5834\u5408\u3001<code>sanctum\/csrf-cookie<\/code> \u306b\u30d8\u30c3\u30c0\u304c\u4ed8\u304b\u305a\u8a8d\u8a3c\u304c\u901a\u3089\u306a\u3044\u3001\u3068\u3044\u3046\u843d\u3068\u3057\u7a74\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<h3>\u8a8d\u8a3c\u4ed8\u304d\u30ea\u30af\u30a8\u30b9\u30c8\u3068 <code>supports_credentials<\/code><\/h3>\n<p>Cookie\u3092\u4f34\u3046\u30ea\u30af\u30a8\u30b9\u30c8\uff08<code>credentials: 'include'<\/code>\uff09\u3067\u306f\u5236\u7d04\u304c\u3055\u3089\u306b\u53b3\u3057\u304f\u306a\u308a\u307e\u3059\u3002<\/p>\n<ul>\n<li>\u30b5\u30fc\u30d0\u306f <code>Access-Control-Allow-Credentials: true<\/code> \u3092\u8fd4\u3059\u5fc5\u8981\u304c\u3042\u308b<\/li>\n<li>\u304b\u3064 <code>Access-Control-Allow-Origin<\/code> \u306b <strong><code>*<\/code>\uff08\u30ef\u30a4\u30eb\u30c9\u30ab\u30fc\u30c9\uff09\u3092\u4f7f\u3048\u306a\u3044<\/strong>\u3002\u5177\u4f53\u7684\u306a\u30aa\u30ea\u30b8\u30f3\u3092\u8fd4\u3059\u5fc5\u8981\u304c\u3042\u308b<\/li>\n<\/ul>\n<p>\u300c\u8a8d\u8a3c\u4ed8\u304d\u3060\u3051\u843d\u3061\u308b\u300d\u30b1\u30fc\u30b9\u306e\u591a\u304f\u306f\u3001<code>allowed_origins<\/code> \u3092 <code>['*']<\/code> \u306b\u3057\u305f\u307e\u307e <code>supports_credentials =&gt; true<\/code> \u306b\u3057\u3066\u3044\u308b\u77db\u76fe\u304c\u539f\u56e0\u3067\u3059\u3002<\/p>\n<h2>\u5bfe\u5fdc\u65b9\u6cd5<\/h2>\n<h3>1. <code>config\/cors.php<\/code> \u3092\u6b63\u3057\u304f\u8a2d\u5b9a\u3059\u308b<\/h3>\n<pre class=\"lang:default decode:true\">&lt;?php\n\nreturn [\n    'paths' =&gt; ['api\/*', 'sanctum\/csrf-cookie', 'login', 'logout'],\n    'allowed_methods' =&gt; ['*'],\n    'allowed_origins' =&gt; [\n        'https:\/\/app.example.com', \/\/ '*' \u306f\u8a8d\u8a3c\u6642NG\n    ],\n    'allowed_origins_patterns' =&gt; [\n        \/\/ '#^https:\/\/.*\\.example\\.com$#',\n    ],\n    'allowed_headers' =&gt; ['*'],\n    'exposed_headers' =&gt; [],\n    'max_age' =&gt; 3600,\n    'supports_credentials' =&gt; true,\n];<\/pre>\n<h3>2. \u74b0\u5883\u3054\u3068\u306b\u30aa\u30ea\u30b8\u30f3\u3092\u5207\u308a\u66ff\u3048\u308b<\/h3>\n<p>\u672c\u756a\u3060\u3051\u5931\u6557\u3059\u308b\u539f\u56e0\u306e\u5927\u534a\u306f\u3001\u958b\u767a\u7528\u306e\u30aa\u30ea\u30b8\u30f3\uff08<code>http:\/\/localhost:3000<\/code>\uff09\u3092\u30cf\u30fc\u30c9\u30b3\u30fc\u30c9\u3057\u3066\u3044\u308b\u3053\u3068\u3067\u3059\u3002\u74b0\u5883\u5909\u6570\u3067\u5207\u308a\u66ff\u3048\u307e\u3059\u3002<\/p>\n<pre class=\"lang:default decode:true\">'allowed_origins' =&gt; array_filter(\n    explode(',', env('CORS_ALLOWED_ORIGINS', ''))\n),<\/pre>\n<pre class=\"lang:default decode:true\"># .env\uff08\u672c\u756a\uff09\nCORS_ALLOWED_ORIGINS=https:\/\/app.example.com\n# .env.local\uff08\u958b\u767a\uff09\nCORS_ALLOWED_ORIGINS=http:\/\/localhost:3000,http:\/\/localhost:5173<\/pre>\n<p>\u8a2d\u5b9a\u3092\u5909\u3048\u305f\u3089\u5fc5\u305a\u8a2d\u5b9a\u30ad\u30e3\u30c3\u30b7\u30e5\u3092\u518d\u751f\u6210\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"lang:default decode:true\">php artisan config:clear\nphp artisan config:cache<\/pre>\n<p>\u672c\u756a\u3067\u300c\u76f4\u3057\u305f\u306f\u305a\u306a\u306e\u306b\u76f4\u3089\u306a\u3044\u300d\u539f\u56e0\u306e\u5e38\u9023\u304c\u3001<code>config:cache<\/code> \u306e\u52b9\u3044\u305f\u53e4\u3044\u8a2d\u5b9a\u3067\u3059\u3002<\/p>\n<h3>3. \u30d7\u30ea\u30d5\u30e9\u30a4\u30c8\u304c419\u306b\u306a\u308b\u3068\u304d<\/h3>\n<p><code>OPTIONS<\/code> \u30ea\u30af\u30a8\u30b9\u30c8\u306bCSRF\u691c\u8a3c\u304c\u304b\u304b\u308b\u3068 <code>419 Page Expired<\/code> \u306b\u306a\u308a\u307e\u3059\u3002<code>HandleCors<\/code> \u306f\u30df\u30c9\u30eb\u30a6\u30a7\u30a2\u30b9\u30bf\u30c3\u30af\u306e\u5341\u5206\u65e9\u3044\u6bb5\u968e\u3067\u51e6\u7406\u3055\u308c\u308b\u5fc5\u8981\u304c\u3042\u308a\u3001\u901a\u5e38\u306f\u30b0\u30ed\u30fc\u30d0\u30eb\u30df\u30c9\u30eb\u30a6\u30a7\u30a2\u3068\u3057\u3066\u767b\u9332\u3055\u308c\u3066\u3044\u307e\u3059\u3002Laravel 11\u306a\u3089 <code>bootstrap\/app.php<\/code>\u3001Laravel 10\u4ee5\u524d\u306a\u3089 <code>app\/Http\/Kernel.php<\/code> \u306e <code>$middleware<\/code> \u3092\u78ba\u8a8d\u3057\u307e\u3059\u3002\u6b63\u3057\u304f\u767b\u9332\u3055\u308c\u3066\u3044\u308c\u3070\u3001<code>HandleCors<\/code> \u304c <code>OPTIONS<\/code> \u3092\u691c\u77e5\u3057\u3066CSRF\u7b49\u306e\u5f8c\u7d9a\u51e6\u7406\u3092\u5f85\u305f\u305a\u306b\u7a7a\u30ec\u30b9\u30dd\u30f3\u30b9\uff0b\u30d8\u30c3\u30c0\u3092\u8fd4\u3057\u307e\u3059\u3002<\/p>\n<h3>4. \u30d5\u30ed\u30f3\u30c8\u5074\u306e\u8a2d\u5b9a\u3092\u5408\u308f\u305b\u308b<\/h3>\n<p>\u30b5\u30fc\u30d0\u3067 <code>supports_credentials =&gt; true<\/code> \u306b\u3057\u3066\u3082\u3001\u30d5\u30ed\u30f3\u30c8\u304c <code>credentials<\/code> \u3092\u9001\u3089\u306a\u3051\u308c\u3070Cookie\u306f\u98db\u3073\u307e\u305b\u3093\u3002<\/p>\n<pre class=\"lang:default decode:true\">\/\/ fetch\nawait fetch('https:\/\/api.example.com\/api\/user', { credentials: 'include' });\n\n\/\/ axios\naxios.defaults.withCredentials = true;<\/pre>\n<h2>\u5b9f\u88c5\u4f8b<\/h2>\n<pre class=\"lang:default decode:true\">&lt;?php\n\/\/ config\/cors.php\n\n$origins = array_filter(array_map('trim',\n    explode(',', env('CORS_ALLOWED_ORIGINS', ''))\n));\n\nreturn [\n    'paths' =&gt; ['api\/*', 'sanctum\/csrf-cookie', 'broadcasting\/auth'],\n    'allowed_methods' =&gt; ['*'],\n    'allowed_origins' =&gt; $origins,\n    'allowed_origins_patterns' =&gt; array_filter(array_map('trim',\n        explode(',', env('CORS_ALLOWED_ORIGINS_PATTERNS', ''))\n    )),\n    'allowed_headers' =&gt; ['*'],\n    'exposed_headers' =&gt; [],\n    'max_age' =&gt; 3600,\n    'supports_credentials' =&gt; env('CORS_SUPPORTS_CREDENTIALS', false),\n];<\/pre>\n<h2>\u78ba\u8a8d\u65b9\u6cd5<\/h2>\n<h3>\u30d7\u30ea\u30d5\u30e9\u30a4\u30c8\u3092\u76f4\u63a5\u53e9\u304f<\/h3>\n<pre class=\"lang:default decode:true\">curl -i -X OPTIONS 'https:\/\/api.example.com\/api\/user' \\\n  -H 'Origin: https:\/\/app.example.com' \\\n  -H 'Access-Control-Request-Method: POST' \\\n  -H 'Access-Control-Request-Headers: content-type, authorization'<\/pre>\n<p>\u671f\u5f85\u3059\u308b\u30ec\u30b9\u30dd\u30f3\u30b9\u30d8\u30c3\u30c0:<\/p>\n<pre class=\"lang:default decode:true\">HTTP\/1.1 204 No Content\nAccess-Control-Allow-Origin: https:\/\/app.example.com\nAccess-Control-Allow-Methods: POST\nAccess-Control-Allow-Headers: content-type, authorization\nAccess-Control-Allow-Credentials: true\nAccess-Control-Max-Age: 3600<\/pre>\n<ul>\n<li><code>Access-Control-Allow-Origin<\/code> \u304c <code>*<\/code> \u306b\u306a\u3063\u3066\u3044\u306a\u3044\u304b\uff08\u8a8d\u8a3c\u6642\u306fNG\uff09<\/li>\n<li>\u30ea\u30af\u30a8\u30b9\u30c8\u3057\u305f <code>Origin<\/code> \u304c\u305d\u306e\u307e\u307e\u8fd4\u3063\u3066\u3044\u308b\u304b<\/li>\n<li><code>Access-Control-Allow-Credentials: true<\/code> \u304c\u4ed8\u3044\u3066\u3044\u308b\u304b<\/li>\n<\/ul>\n<h3>\u30d6\u30e9\u30a6\u30b6\u306eNetwork\u30bf\u30d6\u3067\u78ba\u8a8d\u3059\u308b<\/h3>\n<p>\u8a72\u5f53\u30ea\u30af\u30a8\u30b9\u30c8\u306e\u76f4\u524d\u306b <code>OPTIONS<\/code> \u30ea\u30af\u30a8\u30b9\u30c8\u304c\u8a18\u9332\u3055\u308c\u3066\u3044\u308b\u304b\u3092\u898b\u307e\u3059\u3002\u30d7\u30ea\u30d5\u30e9\u30a4\u30c8\u304c\u5931\u6557\u3057\u3066\u3044\u308c\u3070\u3001\u672c\u756a\u30ea\u30af\u30a8\u30b9\u30c8\u306f\u9001\u4fe1\u3059\u3089\u3055\u308c\u307e\u305b\u3093\u3002<\/p>\n<h2>\u6ce8\u610f\u70b9<\/h2>\n<ul>\n<li><strong><code>Access-Control-Allow-Origin: *<\/code> \u3068 <code>supports_credentials =&gt; true<\/code> \u306f\u5171\u5b58\u3067\u304d\u306a\u3044\u3002<\/strong> \u3053\u308c\u306f\u4ed5\u69d8\u3067\u3042\u308a\u3001Laravel\u306e\u554f\u984c\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002<\/li>\n<li>CORS\u306f<strong>\u8a8d\u53ef\u306e\u4ed5\u7d44\u307f\u3067\u306f\u306a\u3044<\/strong>\u3002CORS\u3092\u8a31\u53ef\u3057\u3066\u3082\u3001API\u306e\u8a8d\u8a3c\u30fb\u8a8d\u53ef\u306f\u5225\u9014\u5fc5\u8981\u3067\u3059\uff08curl\u306f\u7d20\u901a\u308a\u3057\u307e\u3059\uff09\u3002<\/li>\n<li>\u958b\u767a\u7528\u306e <code>localhost<\/code> \u3092\u672c\u756a\u306e <code>allowed_origins<\/code> \u306b\u305d\u306e\u307e\u307e\u6b8b\u3055\u306a\u3044\u3002<\/li>\n<li>\u30d8\u30c3\u30c0\u3092\u4e8c\u91cd\u306b\u4ed8\u3051\u306a\u3044\u3002Web\u30b5\u30fc\u30d0\uff08Nginx \/ Apache\uff09\u5074\u3067\u3082CORS\u30d8\u30c3\u30c0\u3092\u4ed8\u3051\u3066\u3044\u308b\u3068\u3001<code>Access-Control-Allow-Origin<\/code> \u304c2\u3064\u8fd4\u308a\u3001\u304b\u3048\u3063\u3066\u30d6\u30e9\u30a6\u30b6\u304c\u5f3e\u304d\u307e\u3059\u3002\u4ed8\u3051\u308b\u5834\u6240\u306f\u3069\u3061\u3089\u304b\u4e00\u65b9\u306b\u7d71\u4e00\u3057\u307e\u3059\u3002<\/li>\n<li>\u8a2d\u5b9a\u5909\u66f4\u5f8c\u306f\u5fc5\u305a <code>config:clear<\/code> \u2192 <code>config:cache<\/code>\u3002<\/li>\n<\/ul>\n<h2>\u307e\u3068\u3081<\/h2>\n<p>Laravel CORS\u306e\u843d\u3068\u3057\u7a74\u306f\u3001\u307b\u307c\u6b21\u306e5\u70b9\u306b\u96c6\u7d04\u3055\u308c\u307e\u3059\u3002<\/p>\n<ol>\n<li><code>paths<\/code> \u306bCORS\u3092\u52b9\u304b\u305b\u305f\u3044\u30d1\u30b9\uff08Sanctum\u306ecsrf-cookie\u542b\u3080\uff09\u3092\u6f0f\u3089\u3057\u3066\u3044\u308b<\/li>\n<li>\u8a8d\u8a3c\u4ed8\u304d\u306a\u306e\u306b <code>allowed_origins<\/code> \u304c <code>*<\/code> \u306e\u307e\u307e\uff08<code>supports_credentials<\/code> \u3068\u77db\u76fe\uff09<\/li>\n<li>\u30d7\u30ea\u30d5\u30e9\u30a4\u30c8\uff08<code>OPTIONS<\/code>\uff09\u306e\u5b58\u5728\u3092\u610f\u8b58\u3057\u3066\u3044\u306a\u3044<\/li>\n<li>\u672c\u756a\u3067 <code>config:cache<\/code> \u304c\u53e4\u3044\u8a2d\u5b9a\u3092\u63e1\u3063\u3066\u3044\u308b<\/li>\n<li>Web\u30b5\u30fc\u30d0\u3068Laravel\u3067CORS\u30d8\u30c3\u30c0\u3092\u4e8c\u91cd\u4ed8\u4e0e\u3057\u3066\u3044\u308b<\/li>\n<\/ol>\n<p>CORS\u306f\u300c\u30d6\u30e9\u30a6\u30b6\u304c\u5f37\u5236\u3059\u308b\u300d\u3068\u3044\u3046\u524d\u63d0\u3055\u3048\u62bc\u3055\u3048\u308c\u3070\u3001curl\u3067\u30d7\u30ea\u30d5\u30e9\u30a4\u30c8\u3092\u518d\u73fe\u3057\u3066\u5207\u308a\u5206\u3051\u3089\u308c\u307e\u3059\u3002\u52d5\u304b\u306a\u3044\u3068\u304d\u306f\u307e\u305a <code>OPTIONS<\/code> \u3092\u76f4\u63a5\u53e9\u3044\u3066\u3001\u8fd4\u3063\u3066\u304f\u308b\u30d8\u30c3\u30c0\u3092\u76ee\u3067\u78ba\u8a8d\u3059\u308b\u306e\u304c\u6700\u77ed\u30eb\u30fc\u30c8\u3067\u3059\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>SPA\uff08React \/ Vue \u306a\u3069\uff09\u3068Laravel API\u3092\u5225\u30aa\u30ea\u30b8\u30f3\u3067\u904b\u7528\u3059\u308b\u3068\u3001\u30d6\u30e9\u30a6\u30b6\u306eCORS\uff08Cross-Origin Resource Sharing\uff09\u306b\u5fc5\u305a\u3076\u3064\u304b\u308a\u307e\u3059\u3002\u300c\u30ed\u30fc\u30ab\u30eb\u3067\u306f\u52d5\u304f\u306e\u306b\u672c\u756a\u3067 blocked by \u2026<\/p>\n","protected":false},"author":1,"featured_media":3810,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"sns_share_botton_hide":"","vkExUnit_sns_title":"","_vk_print_noindex":"","sitemap_hide":"","_veu_custom_css":"","veu_display_promotion_alert":"","vkexunit_cta_each_option":"","_lightning_design_setting":[],"_jetpack_hide_featured_image":false,"_jetpack_featured_image_duplicate_dismissed":0,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[34],"tags":[64,670,153,967],"class_list":["post-3811","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-php-memorandum","tag-api","tag-curl","tag-laravel","tag-spa"],"veu_head_title_object":{"title":"","add_site_title":""},"jetpack_publicize_connections":[],"jetpack-related-posts":[],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/qol-kk.com\/wp2\/wp-content\/uploads\/2026\/11\/20260914-00mu0ku2-thumbnail.jpg","_links":{"self":[{"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/posts\/3811","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/comments?post=3811"}],"version-history":[{"count":1,"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/posts\/3811\/revisions"}],"predecessor-version":[{"id":3812,"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/posts\/3811\/revisions\/3812"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/media\/3810"}],"wp:attachment":[{"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/media?parent=3811"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/categories?post=3811"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/tags?post=3811"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}