From f9f253d04fcdfa69c3e77999ece334f984d3277e Mon Sep 17 00:00:00 2001
From: Yisroel Baum <yisroel.d.baum@gmail.com>
Date: Mon, 18 May 2026 22:18:54 +0300
Subject: [PATCH] test production cors preflight

---
 backend/tests/Feature/CorsTest.php | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)
 create mode 100644 backend/tests/Feature/CorsTest.php

diff --git a/backend/tests/Feature/CorsTest.php b/backend/tests/Feature/CorsTest.php
new file mode 100644
index 0000000..e86bf54
--- /dev/null
+++ b/backend/tests/Feature/CorsTest.php
@@ -0,0 +1,24 @@
+<?php
+
+namespace Tests\Feature;
+
+use Tests\TestCase;
+
+class CorsTest extends TestCase
+{
+    public function testAllowsProductionFrontendPreflight(): void
+    {
+        $response = $this->withHeaders([
+            'Origin' => 'https://rabbigerzi.com',
+            'Access-Control-Request-Method' => 'POST',
+            'Access-Control-Request-Headers' => 'content-type',
+        ])->options('/login');
+
+        $response->assertNoContent();
+        $response->assertHeader(
+            'Access-Control-Allow-Origin',
+            'https://rabbigerzi.com'
+        );
+        $response->assertHeader('Access-Control-Allow-Credentials', 'true');
+    }
+}