<?php


return [
    'paths' => ['api/*', 'sanctum/csrf-cookie', '*'], // Allow API and all paths
    'allowed_methods' => ['*'], // Allow all HTTP methods
    'allowed_origins' => ['*'], // Allow all domains (set specific domains in production)
    'allowed_origins_patterns' => [],
    'allowed_headers' => ['*'], // Allow all headers
    'exposed_headers' => [],
    'max_age' => 0,
    'supports_credentials' => true, // Enable authentication via cookies
];