'Origin' => ['http://front.ru', 'http://localhost:8080'],
Access-Control-Allow-Methods: GET, POST, HEAD, OPTIONS
'Access-Control-Request-Method'
'corsFilter' => [
'class' => \yii\filters\Cors::class,
'cors' => [
'Origin' => ['http://front.ru', 'http://localhost:8080'],
'Access-Control-Request-Method' => ['OPTIONS', 'POST', 'PUT', 'GET', 'DELETE', 'PATCH', 'HEAD'],
'Access-Control-Request-Headers' => ['*'],
'Access-Control-Allow-Credentials' => true,
'Access-Control-Max-Age' => 3600,
'Access-Control-Expose-Headers' => ['X-Pagination-Current-Page'],
],
],
$arr = ['nice', 'ok', 'wrong'];
return json_encode($arr);