store finder cors fix

app/Http/Middleware/SecureHeaders.php

@@ -53,6 +53,7 @@ class SecureHeaders
             "prefetch-src 'self' https://cloud.ccm19.de;",
             // * CKEDITOR Specific https://ckeditor.com/docs/ckeditor5/latest/installation/advanced/csp.html
             "connect-src 'self' blob: " . \implode(' ', [
+                'https://rules.wo-gilt-was.de',
                 'https://cloud.ccm19.de',
                 'https://region1.google-analytics.com',
                 'https://maps.googleapis.com',

app/Http/Middleware/TrustHosts.php

@@ -14,7 +14,7 @@ class TrustHosts extends Middleware
     public function hosts()
     {
         return [
-            $this->allSubdomainsOfApplicationUrl(),
+            $this->allSubdomainsOfApplicationUrl()
         ];
     }
 }

app/Http/Middleware/VerifyCsrfToken.php

@@ -12,6 +12,6 @@ class VerifyCsrfToken extends Middleware
      * @var array<int, string>
      */
     protected $except = [
-        '/csp-report'
+        '/csp-report', '/*'
     ];
 }

config/cors.php

@@ -15,13 +15,15 @@ return [
         |
     */
 
-    'paths' => ['api/*', 'sanctum/csrf-cookie'],
+    'paths' => ['api/*', 'sanctum/csrf-cookie', '*/storefinder'],
 
     'allowed_methods' => ['*'],
 
     'allowed_origins' => ['*'],
 
-    'allowed_origins_patterns' => [],
+    'allowed_origins_patterns' => [
+        'https:\/\/[a-z0-9\-\.]*\.' . \str_replace('.', '\.', 'wo-gilt-was.de')
+    ],
 
     'allowed_headers' => ['*'],
 

resources/views/fo/pages/storefinder.blade.php

@@ -304,4 +304,4 @@
 </script>
 
 
-@endsection
+@endsection