CORS Requests (SISL fork)
Enables CORS for the Magento 2 API (REST/webapi) so a headless / PWA front on another domain can call the store API from the browser. Runs on 2.4.9 / PHP 8.4.
A headless or PWA storefront usually lives on a different domain than Magento itself. The browser then blocks calls to the store API under the same-origin policy until the server returns Access-Control-Allow-Origin headers. This module adds them to REST/webapi responses and handles OPTIONS preflight requests — configurable origin, credentials, max-age and the AMP header.
This is a maintained fork of the abandoned creatuity/magento-2-cors-requests (last commit 2023). We tightened the composer constraints and verified it on Magento 2.4.9 / PHP 8.4 with a real header test against a live API. Install via VCS + dev-main (see the GitHub README).