# Laravel CORS errors when using reverse proxy

###### When using Laravel with a reverse proxy like LocalCan, it's essential to perform a few setup steps to ensure compatibility.

One common issue that arises is CORS (Cross-Origin Resource Sharing) errors, which can result from Laravel not properly rewriting the host name of the reverse proxy or requesting HTTP content from an HTTPS context (mixed content).

To address these issues, follow these steps:

1. Set `APP_URL` environment variable to reflect your domain
	
	```ini:.env
	APP_URL=http://your-laravel-domain.local
	```
	
3. Because LocalCan handles HTTPS, Laravel needs to be told to generate `https` URLs. Open `app/Providers/AppServiceProvider.php` and add `URL::forceScheme('https');` to the `boot` method.
	
	```diff-php:app/Providers/AppServiceProvider.php
		<?php

		namespace App\Providers;

		use Illuminate\Support\ServiceProvider;
	+	use Illuminate\Support\Facades\URL;

		class AppServiceProvider extends ServiceProvider
		{
			public function register(): void
			{
					//
			}

			public function boot(): void
			{
	+			URL::forceScheme('https');
			}
		}
	```
3. If you use Laravel prior to 11, you need to modify the `RouteServiceProvider.php` file to enable the use of the `forceRootUrl()` method. This step is crucial to ensure that Laravel generates correct URLs when working behind a reverse proxy.
	
	```diff-php:app/Providers/RouteServiceProvider.php
	public function boot(): void
		{
	+		$url = $this->app['url'];
	+		$url->forceRootUrl(config('app.url'));
			// ...
		}
	```

#### Enable Vite and hot-reloads (HMR)

To make Vite development server work through LocalCan's proxy, you will need to:

1. Create a separade domain for Vite in LocalCan. For example `https://vite.local` with a Target Server set to `https://127.0.0.1:5173` (Vite's default address)

2. Edit `vite.config.js` file by adding the `server` code block. This tells Vite how to handle HMR requests through LocalCan's proxy.

		```diff-js:vite.config.js
			// ...
			export default defineConfig({
				// ...
		+   server: {
		+     hmr: {
		+       protocol: 'wss',
		+       host: 'vite.local',
		+       clientPort: 443,
		+     },
		+     cors: {
		+       origin: true,
		+     },
		+   },
			})
		```

After completing these steps, Laravel will be correctly configured to work behind the LocalCan reverse proxy.