CORS Header Builder

Choose origins, methods and headers, then generate Nginx, Express or Cloudflare CORS config.

Generated locally in your browser
We do not store your passwords

Options

Allowed origins

Allowed methods

Allowed headers

Allow credentials

Format

Output

add_header Access-Control-Allow-Origin "https://app.example.com" always;
add_header Access-Control-Allow-Methods "GET,POST,PUT,PATCH,DELETE,OPTIONS" always;
add_header Access-Control-Allow-Headers "Authorization,Content-Type" always;
add_header Access-Control-Allow-Credentials true always;
if ($request_method = OPTIONS) { return 204; }