title: Laravel Access to XMLHttpRequest at from origin has been blocked by CORS policy
body: <p>When I send a call from an Angular application to Laravel, I am getting the below issue</p>
  
  <blockquote>
    <p>Access to XMLHttpRequest at '<a href="http://localhost:8083/api/login_otp" rel="nofollow noreferrer">http://localhost:8083/api/login_otp</a>' from
    origin '<a href="http://localhost:4200" rel="nofollow noreferrer">http://localhost:4200</a>' has been blocked by CORS policy:
    Request header field ip is not allowed by Access-Control-Allow-Headers
    in preflight response.</p>
  </blockquote>
  
  <p>I found a solution and did the below changes in CROS.php</p>
  
  <pre><code>public function handle($request, Closure $next)
      {
          return $next($request)
          -&gt;header('Access-Control-Allow-Origin', '*') 
          -&gt;header('Access-Control-Allow-Methods', 'GET, POST, PATCH, PUT, DELETE, OPTIONS')
          -&gt;header('Access-Control-Allow-Headers', 'Origin, Content-Type, X-Auth-Token, Authorization, X-Requested-With, x-xsrf-token');
      }
  </code></pre>
  
  <p>I added x-xsrf-token in Access-Control-Allow-Headers, but I am still getting the same error.</p>