cors.php

<?php

// Derived from https://github.com/senadir/helper-headless-plugin/blob/trunk/includes/cors.php
add_filter( 'rest_pre_serve_request', function( $value ) {
	header( 'Access-Control-Allow-Origin: ' . 'https://headless-woocommerce-dechov.vercel.app' );
	header( 'Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTION' );
	header( 'Access-Control-Allow-Credentials: true' );
	header( 'Access-Control-Allow-Headers: X-Requested-With, Content-Type, Accept, X-WC-Store-API-Nonce' );
	header( 'Access-Control-Expose-Headers: X-WC-Store-API-Nonce, X-WC-Store-API-Nonce-Timestamp');

	return $value;
} );

add_filter( 'allowed_http_origins', function( $allowed_origins ) {
	header( 'Access-Control-Allow-Headers: content-type, x-wc-store-api-nonce' );
	
	$allowed_origins[] = 'https://headless-woocommerce-dechov.vercel.app';
	return $allowed_origins;
} );