Skip to content
Free public beta until December 4, 2026: every course is open, no card needed. After that, the first chapter of each course stays free and full access is a one-time $39 ($19 for up to 100 founding members chosen for helpful feedback). Your progress is kept. How the beta works

CORS

The browser rule that decides which other websites may call your API from their pages.

CORS lets a server list which origins, methods, and headers a browser may use cross-origin; it protects browser users, not the server.

Loading interactive…

Examples

  • CorsLayer::new().allow_origin([HeaderValue::from_static("https://maplestreettools.example")]) lets that site's pages read answers; curl ignores CORS entirely.

See also

middleware authorization authentication
Read the full section →