Fixed CORS to properly handle both www and non-www origins plus OPTIONS preflight.
ISSUE:
- Subscribe button click from website showed error alert
- No request logged in Trinity Console (request blocked by CORS)
- Original config only allowed https://firefrostgaming.com (no www)
- Missing OPTIONS method for preflight requests
FIX:
- Added both origins: firefrostgaming.com and www.firefrostgaming.com
- Added OPTIONS method for CORS preflight handling
- Added optionsSuccessStatus: 200 for legacy browser support
FILES MODIFIED:
- services/arbiter-3.0/src/index.js (CORS config, 3 lines changed)
TESTING:
- Deploy to Command Center
- Test subscribe button from firefrostgaming.com
- Should now successfully create Stripe checkout session
Signed-off-by: Claude (Chronicler #57) <claude@firefrostgaming.com>
99841f2197