OPTIONS contains almost no logic on the backend, except that the authorization check that you have because of it bombed? Total runs <50ms, well then have of the Internet depends.
"Repaired" two titles, and no longer worried.
The whole backend has long been aware of the OPTIONS.
Now I want to do "as expected" to separate flies (Yii) and burgers (Vue).
And bomb from Kors, but only needed to know that it only works between different domains, so why not just raise the backend and front on the same domain?