added cors bundle to allow external api access (#655)

config/packages/nelmio_cors.yaml

@@ -0,0 +1,21 @@
+nelmio_cors:
+    defaults:
+        allow_credentials: false
+        allow_origin: ['%env(CORS_ALLOW_ORIGIN)%']
+        allow_headers: []
+#        allow_headers: ['Content-Type', 'Authorization', 'X-AUTH-USER', 'X-AUTH-TOKEN']
+        allow_methods: []
+#        allow_methods: ['GET', 'OPTIONS', 'POST', 'PUT', 'PATCH', 'DELETE']
+        expose_headers: []
+#        expose_headers: ['Link']
+        max_age: 0
+#        max_age: 3600
+        hosts: []
+        origin_regex: true
+        forced_allow_origin_value: ~
+    paths:
+        '^/api/':
+            allow_origin: ['*']
+            allow_headers: ['X-AUTH-USER', 'X-AUTH-TOKEN']
+            allow_methods: ['GET', 'OPTIONS', 'POST', 'PUT', 'PATCH', 'DELETE']
+            max_age: 3600