diff --git a/backend/tests/Feature/CorsTest.php b/backend/tests/Feature/CorsTest.php
new file mode 100644
index 0000000..e86bf54
--- /dev/null
+++ b/backend/tests/Feature/CorsTest.php
@@ -0,0 +1,24 @@
+<?php
+
+namespace Tests\Feature;
+
+use Tests\TestCase;
+
+class CorsTest extends TestCase
+{
+    public function testAllowsProductionFrontendPreflight(): void
+    {
+        $response = $this->withHeaders([
+            'Origin' => 'https://rabbigerzi.com',
+            'Access-Control-Request-Method' => 'POST',
+            'Access-Control-Request-Headers' => 'content-type',
+        ])->options('/login');
+
+        $response->assertNoContent();
+        $response->assertHeader(
+            'Access-Control-Allow-Origin',
+            'https://rabbigerzi.com'
+        );
+        $response->assertHeader('Access-Control-Allow-Credentials', 'true');
+    }
+}