CORS Errors Only in Production: Preflight, Credentials, and the Cache That Hides Your Fix

A debugging order for CORS errors that only appear in production: read the preflight, check credentials mode, then check what your CDN cached.