Why is the CORS header missing in Laravel when sending an AJAX request?

Question

Laravel

Hey!
Sending an AJAX request like this:

$.ajaxSetup({
                headers: {
                    'X-CSRF-TOKEN': "{{ csrf_token() }}"
                }
            });

            $.ajax({
                url: "https://www.example.ru/confirm",
                type: "post",
                data: {type: "Customer", order_id: order_id},
                dataType: "json",
                error: function (err) {
                    console.log(err);
                }
            });
        });

An error occurs:

Request from foreign source blocked: The single origin policy prohibits reading the remote resource at https://example.ru/confirm . (Reason: missing CORS header "Access-Control-Allow-Origin").

It costs Laravel v.7.19.1, installed the barryvdh/laravel-cors package in addition, but it did not help.
And how would I understand that there is no header in the response, but I don’t know how to put it ...
Also, I tried to make my own global middleware, it didn’t help either.

Any ideas?

Answer 1

Use the ready-made middleware - \Fruitcake\Cors\HandleCors::class + by specifying the desired route in the config, as described here https://github.com/fruitcake/laravel-cors in the Global Usage section.
If it starts up, then you can figure out what was wrong with your middleware.