From c0ec662a6cde75a91c904e48ce3c3e7b38bff0c1 Mon Sep 17 00:00:00 2001
From: henry yo <henry194557@gmail.com>
Date: Thu, 25 Jun 2026 22:17:51 +0800
Subject: [PATCH] fix: change config

---
 config/cors.php | 33 +++++----------------------------
 1 file changed, 5 insertions(+), 28 deletions(-)

diff --git a/config/cors.php b/config/cors.php
index 194df09..152db1f 100644
--- a/config/cors.php
+++ b/config/cors.php
@@ -1,39 +1,16 @@
 <?php
 
 return [
-
-    /*
-    |--------------------------------------------------------------------------
-    | Cross-Origin Resource Sharing (CORS) Configuration
-    |--------------------------------------------------------------------------
-    |
-    | Here you may configure your settings for cross-origin resource sharing
-    | or "CORS". This determines what cross-origin operations may execute
-    | in web browsers. You are free to adjust these settings as needed.
-    |
-    */
-
-    // 🎯 1. 確保包含了你前端呼叫的所有路徑前綴
     'paths' => ['api/*', 'v1/*', 'auth/*', 'sanctum/csrf-cookie'],
-
+    
+    // 🎯 暫時改成全放行星號，排除 cors.php 這一層的陣列比對干擾
     'allowed_methods' => ['*'],
-
-    // 🎯 2. 精準放行本地端 Vite（5173）與雲端生產網域
-    'allowed_origins' => [
-        'https://fin-buddy.duckdns.org',
-        'http://localhost:5173',
-        'http://127.0.0.1:5173'
-    ],
-
+    'allowed_origins' => ['*'], 
     'allowed_origins_patterns' => [],
-
     'allowed_headers' => ['*'],
-
     'exposed_headers' => [],
-
     'max_age' => 0,
-
-    // 🎯 3. 超級關鍵！因為你在本地測試有帶登入態（Cookie/Session），這項一定要是 true！
+    
+    // 🎯 保持 true 以支援登入態 Cookie
     'supports_credentials' => true,
-
 ];