On this page

Show all

Help Center/ Object Storage Service/ SDK Reference/ PHP/ CORS/ Setting CORS Rules

Setting CORS Rules

Updated on 2023-11-09 GMT+08:00

View PDF

NOTICE:

If you have any questions during development, post them on the Issues page of GitHub. For details about parameters and usage of each API, see API Reference.

You can call ObsClient->setBucketCors to set CORS rules for a bucket. If the bucket is configured with CORS rules, the newly set ones will overwrite the existing ones. Sample code is as follows:

// Import the dependency library.
require 'vendor/autoload.php';
// Import the SDK code library during the installation with source code.
// require 'obs-autoloader.php';
// Declare the namespace.
use Obs\ObsClient;
// Create an ObsClient instance.
$obsClient = new ObsClient ( [ 
      //Obtain an AK/SK pair using environment variables or import the AK/SK pair in other ways. Using hard coding may result in leakage.
      //Obtain an AK/SK pair on the management console. For details, see https://support.huaweicloud.com/eu/usermanual-ca/ca_01_0003.html.
      'key' => getenv('ACCESS_KEY_ID'),
      'secret' => getenv('SECRET_ACCESS_KEY'),
      'endpoint' => 'https://your-endpoint'
] );

$resp = $obsClient->setBucketCors ( [ 
       'Bucket' => 'bucketname',
       'CorsRules' => [ 
                     [ 
                           'ID' => 'rule1',
                           //Specify the request method, which can be GET, PUT, DELETE, POST, or HEAD.
                           'AllowedMethod' => [ 'GET','HEAD','PUT'],
                           //Specify the origin of the cross-domain request.
                           'AllowedOrigin' => ['http://www.a.com', 'http://www.b.com'],
                           // Specify whether headers specified in Access-Control-Request-Headers in the OPTIONS request can be used. 
                           'AllowedHeader' => [ 'x-obs-header'],
                           // Specify response headers that users can access using application programs.
                           'ExposeHeader' => ['x-obs-expose-header'],
                           // Specify the browser's cache time of the returned results of OPTIONS requests for specific resources, in seconds.
                           'MaxAgeSeconds' => 60 
                     ]
       ] 
] );
printf ( "RequestId:%s\n", $resp ['RequestId'] );

NOTE:

Use the CorsRules parameter to set CORS rules for a bucket.
Both AllowedOrigin and AllowedHeader can contain one wildcard character (*). The wildcard character (*) indicates that all origins or headers are allowed.

Parent topic: CORS

Previous topic: CORS Overview

Next topic: Viewing CORS Rules

Feedback

Was this page helpful?

Helpful Not helpful

Provide feedback

Thank you very much for your feedback. We will continue working to improve the documentation.

The system is busy. Please try again later.

Which of the following issues have you encountered?

Content is inconsistent with the product UI

Unclear descriptions

Lack of examples or code

Incorrect steps

Can't find what I need

Lack of best practices

Feedback (optional)

0/500

Select at least one type of issue, and enter your comments or suggestions.

Enter a maximum of 500 characters.

Submit Cancel