Ignored Subdomains on Redirection #43184
Description
- Laravel Version: 9.19.0
- PHP Version: 8.1.2
- Database Driver & Version: MySQL 8
Description:
I'm using Laravel with JetStream, InertiaJS --SSR and VueJS. I'm working with this form that submits a store request to products/create in order to create a new product, then I'm trying to return and redirect to view the product with subdomain as the username of the product owner like this {username}.example.test/{productSlug} but I was getting this error:
Access to XMLHttpRequest at 'http://user.example.test/my-first-product' (redirected from 'http://example.test/products/create') from origin 'http://example.test' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.
I solved that by making the below changes in cors.php:
'paths' => ['api/*', '*', 'sanctum/csrf-cookie'],
'exposed_headers' => ['x-inertia'],Now I'm being redirected to a working page with the intended product but incorrect url example.test/{productSlug} without the username as a subdomain. If I refresh the page of course I get a 404 because this is an incorrect route and if I manually visit the correct url {username}.example.test/{productSlug} I find it working. So mainly I'm redirected to a url that doesn't include the subdomain.
Checked the network tap on firefox and the request is passed correctly with subdomain and the host as well contains the correct url with subdomain.
Steps To Reproduce:
1- Start new laravel project and install Jetstream with InertiaJS SSR and Vue.
2- Make Product model and migration.
3- Create a form where a User can create a new Product and send the request to store the product and redirect to show the product.
public function store(StoreProductRequest $request)
{
// Code
return redirect()->route('products.show', [$username, $slug]);
}4- Make a new route with subdomain to view the product:
Route::domain('{username}.' . env('SESSION_DOMAIN'))->group(function () {
Route::get('{slug}', [ProductController::class, 'show'])->name('products.show');
});5- Return the models in the show method:
public function show($username, $slug)
{
$user = User::where('username', $username)->first();
$product = Product::where('slug', $slug)->first();
return Inertia::render('Products/Show', [
'user' => $user,
'product' => $product,
]);
}6- You will get CORS errors, update cors.php as below:
'paths' => ['api/*', '*', 'sanctum/csrf-cookie'],
'allowed_methods' => ['*'],
'allowed_origins' => ['*'],
'allowed_origins_patterns' => [],
'allowed_headers' => ['*'],
'exposed_headers' => ['x-inertia'],
'max_age' => 0,
'supports_credentials' => false,7- Submit the form and the controller store action finishes what It's supposed to do and then redirects to a working page of the product without cors errors, the only problem is that it shows in the browser as example.test/productSlug while it's supposed to be username.example.test/productSlug. When refresh the page It gets 404 page not found error which make sense because that's an incorrect route, When manually visiting the desired route you can find it working as expected.