o2switch.htaccess

<IfModule mod_rewrite.c>
    RewriteEngine On

    # -------------------------------------------------
    # 1. Stop OPTIONS preflight HERE (NO redirect)
    # -------------------------------------------------
    RewriteCond %{REQUEST_METHOD} OPTIONS
    RewriteRule ^ - [END]

    # -------------------------------------------------
    # 2. Laravel Front Controller
    # -------------------------------------------------
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule ^ index.php [L]
</IfModule>

<IfModule mod_headers.c>
    # -------------------------------------------------
    # 3. CORS HEADERS (critical)
    # -------------------------------------------------
    Header always set Access-Control-Allow-Origin "*"
    Header always set Access-Control-Allow-Methods "GET, POST, PUT, PATCH, DELETE, OPTIONS"
    Header always set Access-Control-Allow-Headers "Content-Type, Authorization, X-Requested-With"
    Header always set Access-Control-Max-Age "86400"
</IfModule>

# -------------------------------------------------
# 4. Required for OPTIONS to return 204
# -------------------------------------------------
<IfModule mod_setenvif.c>
    SetEnvIf Request_Method OPTIONS is_preflight=1
</IfModule>

<IfModule mod_headers.c>
    Header always set Content-Length "0" env=is_preflight
    Header always set Content-Type "text/plain; charset=UTF-8" env=is_preflight
</IfModule>

Options -Indexes