Serverless Stack

I finally understood the main problem. The CORS error says that even in the preflight request we are getting `Access-Control-Allow-Origin: *`, but there is a different value there.
```        allowOrigins: [
          "<http://localhost:3000>",
          "<https://domain1>",
          "<https://dev.domain1>",
        ],```

<@U01JVDKASAC> This is the only problem that prevents our successful deployment

I see.. are you hardcoding both `<https://domain1>` and `<https://dev.domain1>` ?

Yes, but why do I get the same `*` on localhost as well?

<@U036SNFDCS2> I create a sample repo to gave this a try
<https://github.com/fwang/sst-triage-cors>

It’s a very simple app with 1 Api. The cors is configured like this <https://github.com/fwang/sst-triage-cors/blob/main/stacks/MyStack.js#L9-L14>

And I ran a test from <https://resttesttest.com/>

The `access-control-allow-origin` seems to be set correctly in the response header.

This is the correct behavior you were expecting to see right?