Documentation is not goood

[allestaire]

Steps needed to make it work (on Lumen only)

• copy cors.php to config\cors.php
• Then on bootstrap\app.php enable configuration, add this line $app->configure('cors');
• (in my case, I was in question why the cors value is empty)
• Then add this line \Illuminate\Http\Middleware\HandleCors::class to $app->middleware
• Once that done. If you have custom header such as in my case x-api-key you must add it to allowed_headers array example: ['x-api-key']
• Then on your api call such as axios you can add it to your custom headers which is base on this documentation Doc
• Note that the X-Auth-Token should be pass as x-auth-token as I check, the server returns it as small cases.