# Cors in cakephp 3.6

**URL:** <https://discourse.cakephp.org/t/cors-in-cakephp-3-6/4676>\
**Category:** Need Help\
**Tags:** behavior\
**Created:** [August 8, 2018, 9:30am UTC](https://discourse.cakephp.org/t/cors-in-cakephp-3-6/4676 "2018-08-08T09:30:41Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![vijay07roy](https://avatars.discourse-cdn.com/v4/letter/v/e68b1a/32.png) [@vijay07roy](https://discourse.cakephp.org/u/vijay07roy)\
**Post date:** [August 8, 2018, 9:30am UTC](https://discourse.cakephp.org/t/cors-in-cakephp-3-6/4676/1 "2018-08-08T09:30:41Z")

</div>

I am using cors for my app with Cakephp 3.6  
I am writing this in AppContoller.php  
So that all my API is allowed on other host requests.  
use Cake\Event\Event;  
use App\Model\Entity\Users as UsersEntity;  
use Cake\Http;  
use Cake\Http\CorsBuilder;

```
public function beforeFilter(Event $event)
    {
        parent::beforeFilter($event);
        $this->response->cors($this->request)
             ->allowOrigin(['*'])
             ->allowMethods(['GET', 'POST'])
             ->allowHeaders(['Content-Type','X-CSRF-Token','Authorization'])          
             ->maxAge(172800)
             ->build();

    }

```

Is this Correct ? Then why this is not working?  
Thanks

---

<div class="post-metadata">

**Author:** ![luisaguilar](https://yyz1.discourse-cdn.com/flex029/user_avatar/discourse.cakephp.org/luisaguilar/32/1258_2.png) [@luisaguilar](https://discourse.cakephp.org/u/luisaguilar)\
**Post date:** [December 25, 2018, 3:50pm UTC](https://discourse.cakephp.org/t/cors-in-cakephp-3-6/4676/2 "2018-12-25T15:50:13Z")

</div>

hi,  
did you resolved this?

---

<div class="post-metadata">

**Author:** ![ADmad](https://yyz1.discourse-cdn.com/flex029/user_avatar/discourse.cakephp.org/admad/32/20_2.png) [@ADmad](https://discourse.cakephp.org/u/ADmad)\
**Post date:** [December 26, 2018, 12:51pm UTC](https://discourse.cakephp.org/t/cors-in-cakephp-3-6/4676/3 "2018-12-26T12:51:08Z")

</div>

The response instance is immutable so you need to assign back the modified response instance to `$this->response`.