Setting CORS Rules

You can call ObsClient->setBucketCors to set CORS rules for a bucket. If the bucket is configured with CORS rules, the newly set ones will overwrite the existing ones. Sample code is as follows:

// Import the dependency library.
require 'vendor/autoload.php';
// Import the SDK code library during the installation with source code.
// require 'obs-autoloader.php';
// Declare the namespace.
use Obs\ObsClient;
// Create an ObsClient instance.
$obsClient = new ObsClient ( [ 
      //Obtain an AK/SK pair using environment variables or import the AK/SK pair in other ways. Using hard coding may result in leakage.
      //Obtain an AK/SK pair on the management console.
      'key' => getenv('ACCESS_KEY_ID'),
      'secret' => getenv('SECRET_ACCESS_KEY'),
      'endpoint' => 'https://your-endpoint'
] );

$resp = $obsClient->setBucketCors ( [ 
       'Bucket' => 'bucketname',
       'CorsRules' => [ 
                     [ 
                           'ID' => 'rule1',
                           //Specify the request method, which can be GET, PUT, DELETE, POST, or HEAD.
                           'AllowedMethod' => [ 'GET','HEAD','PUT'],
                           //Specify the origin of the cross-domain request.
                           'AllowedOrigin' => ['http://www.a.com', 'http://www.b.com'],
                           // Specify whether headers specified in Access-Control-Request-Headers in the OPTIONS request can be used. 
                           'AllowedHeader' => [ 'x-obs-header'],
                           // Specify response headers that users can access using application programs.
                           'ExposeHeader' => ['x-obs-expose-header'],
                           // Specify the browser's cache time of the returned results of OPTIONS requests for specific resources, in seconds.
                           'MaxAgeSeconds' => 60 
                     ]
       ] 
] );
printf ( "RequestId:%s\n", $resp ['RequestId'] );

• Use the CorsRules parameter to set CORS rules for a bucket.
• Both AllowedOrigin and AllowedHeader can contain one wildcard character (*). The wildcard character (*) indicates that all origins or headers are allowed.