['api/*', 'admin/*', 'sanctum/csrf-cookie'], 'allowed_methods' => ['*'], 'allowed_origins' => ['*'], 'allowed_origins_patterns' => [], 'allowed_headers' => ['*'], 'exposed_headers' => ['Authorization'], 'max_age' => 86400, // 24小时 'supports_credentials' => true, ];