<IfModule mod_rewrite.c>
    <IfModule mod_negotiation.c>
        # Options -MultiViews -Indexes
    </IfModule>

    RewriteEngine On
	Header set Access-Control-Allow-Origin "*"
    Header add Access-Control-Allow-Headers "Origin, X-Requested-With, Content-Type, Accept, Authorization, Device-Type, Device-Id"
    Header add Access-Control-Allow-Methods "PUT, GET, POST, DELETE, OPTIONS, PATCH, HEAD"
    Header add Access-Control-Allow-Credentials "true"
    Header add Access-Control-Expose-Headers "Access-Token, Refresh-Token"

    # Handle Authorization Header
    RewriteCond %{HTTP:Authorization} .
    RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
    
    # Redirect Trailing Slashes If Not A Folder...
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteCond %{REQUEST_URI} (.+)/$
    RewriteRule ^ %1 [L,R=301]

    # Handle Front Controllers...
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteRule ^ index.php [L]

    # ensure www.
    # RewriteCond %{HTTP_HOST} !^www\. [NC]
    # RewriteRule ^ https://www.%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

 
    # ensure https
    # RewriteCond %{HTTP:X-Forwarded-Proto} !https
    # RewriteCond %{HTTPS} off
    # RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
    Order allow,deny
    Allow from all
 
</IfModule>
