['api/*'], 'allowed_methods' => ['GET','POST','PUT','DELETE','PATCH','OPTIONS'], 'allowed_origins' => explode(',',env('ALLOWED_ORIGINS', 'http://127.0.0.1:3000')), 'allowed_origins_patterns' => [], 'allowed_headers' => ['content-type','cookie','authorization','x-requested-with'], 'exposed_headers' => [], 'max_age' => 0, 'supports_credentials' => true, ];