explode(',', env('CORS_PATHS', 'api/*')), 'allowed_methods' => ['*'], 'allowed_origins' => env('DEV', 0) == 1 ? explode(',', env('DEV_CORS_ALLOWED_ORIGINS')) : explode(',', env('PROD_CORS_ALLOWED_ORIGINS')), 'allowed_origins_patterns' => [], 'allowed_headers' => ['*'], 'exposed_headers' => [], 'max_age' => 0, 'supports_credentials' => true, ];