<?php

return [

    'paths' => [
        'api/*',
        'admin/*', // Allow CORS for admin routes
        'broadcasting/auth',  // Allow Pusher auth
        'sanctum/csrf-cookie', // Needed if using Laravel Sanctum
    ],

    'allowed_methods' => ['*'],

    'allowed_origins' => [
        'http://localhost:3000', // React local dev
        // 'https://your-react-frontend.com', // Add your production frontend here
        'https://control.machinox.in'
    ],

    'allowed_origins_patterns' => [],

    'allowed_headers' => ['*'],

    'exposed_headers' => [],

    'max_age' => 0,

    'supports_credentials' => true, // Important if you're using cookies or Sanctum

];