CORS demo

This page runs in your browser on the portal origin and calls the API on a different origin — so you can watch CORS (preflight OPTIONS and Access-Control-Allow-* headers) live in DevTools → Network.