['api/*'], 'allowed_methods' => ['*'], 'allowed_origins' => ['*'], 'allowed_origins_patterns' => [], 'allowed_headers' => [ 'Content-Type', 'X-Requested-With', 'Authorization', 'X-API-Version', 'X-Client-ID', 'Accept', ], 'exposed_headers' => [], 'max_age' => 0, 'supports_credentials' => true, ];