Ошибка Laravel CORS с учетными данными

Я использую angular 4 в качестве внешнего интерфейса и laravel (homestead mydomain.test) в качестве бэкенда. ниже отображаются ошибки в браузере Chrome, когда я хочу отправить файл cookie с angular 4 на серверную часть API laravel:

Файл конфигурации barryvdh / laravel-cors (файл конфигурации cors.php):

return [

    /*
    |--------------------------------------------------------------------------
    | Laravel CORS
    |--------------------------------------------------------------------------
    |
    | allowedOrigins, allowedHeaders and allowedMethods can be set to array('*')
    | to accept any value.
    |
    */

    'supportsCredentials' => true,
'allowedOrigins' => ['http://localhost:4200'],
'allowedHeaders' => ['Content-Type','Accept'],
'allowedMethods' => ['GET','POST','PUT', 'PATCH', 'OPTION'],
'exposedHeaders' => ['Content-Disposition', 'x-total-count', 'x-filename', '*'],
'maxAge' => 0,
'hosts' => ['*'],

Angular 4 запроса:

refreshToken(){

    const headers = new Headers({ 'Content-Type': 'application/x-www-form-urlencoded', 'Authorization': 'Bearer ' + this.getToken()})
    let options = new RequestOptions({ headers: headers, withCredentials: true });
    return this.http.post(API_DOMAIN + 'refresh', JSON.stringify({}), options)
      .map(
        (response) => {
          console.log(response.json());
          return response.json()
        },
      )
  }

Ошибки браузера:

Failed to load http://mydomian.test/api/refresh: Response to preflight request doesn't pass access control check: The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'. Origin 'http://localhost:4200' is therefore not allowed access. The credentials mode of requests initiated by the XMLHttpRequest is controlled by the withCredentials attribute.