Build CORS headers

Codefragmenten

curl "https://api.oanor.com/cors-api/v1/headers" \
  -H "x-oanor-key: oanor_test_..."

await fetch("https://api.oanor.com/cors-api/v1/headers", {
  headers: { "x-oanor-key": "oanor_test_..." }
});

$ch = curl_init("https://api.oanor.com/cors-api/v1/headers");
curl_setopt($ch, CURLOPT_HTTPHEADER, ["x-oanor-key: oanor_test_..."]);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$out = curl_exec($ch);

import requests
requests.get(
    "https://api.oanor.com/cors-api/v1/headers",
    headers={"x-oanor-key": "oanor_test_..."}
)

Voorbeeldrespons

Een echte respons van dit endpoint, vastgelegd bij de laatste health check.

{
    "data": {
        "origin": "https://app.example.com",
        "allowed": true,
        "headers": {
            "Access-Control-Allow-Origin": "*",
            "Access-Control-Allow-Headers": "Content-Type, Authorization",
            "Access-Control-Allow-Methods": "GET, POST, PUT, PATCH, DELETE, OPTIONS"
        },
        "header_string": "Access-Control-Allow-Origin: *\nAccess-Control-Allow-Methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\nAccess-Control-Allow-Headers: Content-Type, Authorization"
    },
    "meta": {
        "timestamp": "2026-06-03T09:25:00.652Z",
        "request_id": "e6ad9866-7ba0-4eb1-bb57-6feb132c1ce4"
    },
    "status": "ok",
    "message": "Build CORS headers",
    "success": true
}