Cross-origin Resource Sharing (CORS) allows web applications to access resources in other domains. OSS provides an interface for developers to conveniently control cross-origin access permissions.

For more information about CORS, refer to CORS Access.

Note: Complete code for the following scenarios can be found at GitHub.

Set CORS rules

The putBucketCors method is used to configure a CORS rule for a specified bucket. If the original CORS rule already exists, it will be overwritten by the new one. Parameters for specific rules are generally set through the CORSRule class.

You can set the bucket CORS rules using OssClient::putBucketCors:

<?php
/**
 * Configure CORS for a bucket
 *
 * @param OssClient $ossClient OSSClient instance
 * @param string    $bucket Bucket name
 * @return null
 */
function putBucketCors($ossClient, $bucket)
{
    $corsConfig = new CorsConfig();
    $rule = new CorsRule();
    $rule->addAllowedHeader("x-oss-header");
    $rule->addAllowedOrigin("http://www.b.com");
    $rule->addAllowedMethod("POST");
    $rule->setMaxAgeSeconds(10);
    $corsConfig->addRule($rule);
    try{
        $ossClient->putBucketCors($bucket, $corsConfig);
    } catch(OssException $e) {
        printf(__FUNCTION__ . ": FAILED\n");
        printf($e->getMessage() . "\n");
        return;
    }
    print(__FUNCTION__ . ": OK" . "\n");
}

Notice:

• Each bucket allows up to 10 CORS rules.
• The AllowedOrigins and AllowedMethods each supports up to one * wildcard. * indicates that all origin sources or operations are allowed.
• AllowedHeaders and ExposeHeaders do not support wildcards.

Get CORS rules

You can get the bucket CORS rules using OssClient::getBucketCors:

<?php
/**
 * Get and print the CORS rules of a bucket
 *
 * @param OssClient $ossClient OSSClient instance
 * @param string    $bucket Bucket name
 * @return null
 */
function getBucketCors($ossClient, $bucket)
{
    $corsConfig = null;
    try{
        $corsConfig = $ossClient->getBucketCors($bucket);
    } catch(OssException $e) {
        printf(__FUNCTION__ . ": FAILED\n");
        printf($e->getMessage() . "\n");
        return;
    }
    print(__FUNCTION__ . ": OK" . "\n");
    print($corsConfig->serializeToXml() . "\n");
}

Delete a CORS rule

You can disable and clear all the CORS rules of a bucket using OssClient::deleteBucketCors:

<?php
/**
 * Delete all CORS rules of a bucket
 *
 * @param OssClient $ossClient OSSClient instance
 * @param string    $bucket Bucket name
 * @return null
 */
function deleteBucketCors($ossClient, $bucket)
{
    try{
        $ossClient->deleteBucketCors($bucket);
    } catch(OssException $e) {
        printf(__FUNCTION__ . ": FAILED\n");
        printf($e->getMessage() . "\n");
        return;
    }
    print(__FUNCTION__ . ": OK" . "\n");
}