OptionalallowedBrowser origin(s) permitted to call this relay cross-origin.
'*' allows any origin (echoes *).Origin
is echoed back only when it matches; otherwise no Access-Control-Allow-Origin
is emitted (browser blocks the response).OPTIONS returns 405 (same as before).
Optional CORS configuration for createFetchHandler. Omit it entirely to keep same-origin behaviour (no CORS headers, OPTIONS → 405).