Where I can enable CORS for my proxies API?

Website, Application, Performance Security
1

Hello

I have an origin proxified api server (e.g. api.mydomain.com).
I have an SPA on mydomain.com address that access api.mydomain.com. (domains are not real, it is just en example)
I need to provide cors headers to allow access api.

So the questions is: who should provide cors headers - Cloudflare or origin server?
If Cloudflare - please tell me how.

Thanks you very much.

2

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.