How to setup CORS in yii3 ? about demo

[yiiliveext]

We don't yet have our own CORS middleware implementation, but you can use any psr-7/psr-15 compatible middleware.
For example https://github.com/tuupola/cors-middleware

Route::get('/info/v2', ApiInfo::class)
    ->addMiddleware(FormatDataResponseAsJson::class)
    ->addMiddleware(fn() => new Tuupola\Middleware\CorsMiddleware([
        "origin" => ["*"],
        "methods" => ["GET", "POST", "PUT", "PATCH", "DELETE"],
        "headers.allow" => [],
        "headers.expose" => [],
        "credentials" => false,
        "cache" => 0,
   ]))
   ->name('api/info/v2'),

[ayiangio]

@samdark @yiiliveext
the code you have given doesn't work in my case

[samdark]

@ayiangio what are headers that are sent?

[ayiangio]

We want to send two headers

1. Authorization for token
2. Role user

@samdark

[samdark]

OK but what headers are actually sent after you configure CSRF middleware and make a request?