<?php

return [
    /*
     * Switchyard API + admin. The docs-site try-it console at
     * `switchyard.philiprehberger.com` (Scalar API reference) fires real
     * calls cross-origin into `api.switchyard.philiprehberger.com`, so the
     * API needs to allow that origin specifically. The Filament admin
     * is same-origin so doesn't need its own entry.
     */

    'paths' => ['v1/*', 'webhooks/*'],

    'allowed_methods' => ['*'],

    'allowed_origins' => [
        'https://switchyard.philiprehberger.com',
        'http://localhost:3000',
        'http://localhost:3014',
        'http://localhost:3018',
    ],

    'allowed_origins_patterns' => [],

    'allowed_headers' => ['*'],

    'exposed_headers' => [
        'X-RateLimit-Limit',
        'X-RateLimit-Remaining',
        'X-RateLimit-Reset',
    ],

    'max_age' => 600,

    'supports_credentials' => false,
];