'text/html;charset=utf-8', 'Access-Control-Allow-Origin' => '*', 'Access-Control-Allow-Methods' => 'GET, POST, PATCH, PUT, DELETE, OPTIONS', 'Access-Control-Allow-Headers' => '*', 'Access-Control-Allow-Credentials' =>true ]; return $next($request)->header($header); } }