Setting CORS Rules
![](https://support.huaweicloud.com/eu/sdk-php-devg-obs/public_sys-resources/notice_3.0-en-us.png)
If you have any questions during development, post them on the Issues page of GitHub. For details about parameters and usage of each API, see API Reference.
You can call ObsClient->setBucketCors to set CORS rules for a bucket. If the bucket is configured with CORS rules, the newly set ones will overwrite the existing ones. Sample code is as follows:
// Import the dependency library. require 'vendor/autoload.php'; // Import the SDK code library during the installation with source code. // require 'obs-autoloader.php'; // Declare the namespace. use Obs\ObsClient; // Create an ObsClient instance. $obsClient = new ObsClient ( [ //Obtain an AK/SK pair using environment variables or import the AK/SK pair in other ways. Using hard coding may result in leakage. //Obtain an AK/SK pair on the management console. For details, see https://support.huaweicloud.com/eu/usermanual-ca/ca_01_0003.html. 'key' => getenv('ACCESS_KEY_ID'), 'secret' => getenv('SECRET_ACCESS_KEY'), 'endpoint' => 'https://your-endpoint' ] ); $resp = $obsClient->setBucketCors ( [ 'Bucket' => 'bucketname', 'CorsRules' => [ [ 'ID' => 'rule1', //Specify the request method, which can be GET, PUT, DELETE, POST, or HEAD. 'AllowedMethod' => [ 'GET','HEAD','PUT'], //Specify the origin of the cross-domain request. 'AllowedOrigin' => ['http://www.a.com', 'http://www.b.com'], // Specify whether headers specified in Access-Control-Request-Headers in the OPTIONS request can be used. 'AllowedHeader' => [ 'x-obs-header'], // Specify response headers that users can access using application programs. 'ExposeHeader' => ['x-obs-expose-header'], // Specify the browser's cache time of the returned results of OPTIONS requests for specific resources, in seconds. 'MaxAgeSeconds' => 60 ] ] ] ); printf ( "RequestId:%s\n", $resp ['RequestId'] );
![](https://support.huaweicloud.com/eu/sdk-php-devg-obs/public_sys-resources/note_3.0-en-us.png)
- Use the CorsRules parameter to set CORS rules for a bucket.
- Both AllowedOrigin and AllowedHeader can contain one wildcard character (*). The wildcard character (*) indicates that all origins or headers are allowed.
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.