# Authoritative CORS response for the current localhost frontend under
# Apache/OpenLiteSpeed. Keep the directives deliberately simple because some
# shared-hosting LiteSpeed builds reject conditional Header syntax.
<IfModule mod_headers.c>
    Header always set Access-Control-Allow-Origin "http://localhost:8100"
    Header always set Access-Control-Allow-Methods "GET, POST, PUT, DELETE, OPTIONS"
    Header always set Access-Control-Allow-Headers "Accept, Content-Type, DOLAPIKEY, Authorization, Idempotency-Key"
    Header always set Access-Control-Max-Age "86400"
    Header always set Vary "Origin"
</IfModule>
