📌 Removed the wildcard (*) origin and replaced it with trusted origins from .env.
📌 Introduced environment variable (CORS_ALLOWED_ORIGINS) for dynamic origin management.
📌 Improved security by blocking untrusted origins and methods.
📌 Enhanced performance with maxAge for caching preflight responses.
📌 No breaking changes, as the fallback origin is set to http://localhost:4000 for development, ensuring compatibility with local setups.
Ritesh Ghosh