CORS is mostly used to prevent attacks from a browser script on a non-whitelisted website (CSRF etc.). To prevent someone abusing your API otherwise, use an au

CORS is mostly used to prevent attacks from a browser script on a non-whitelisted website (CSRF etc.). To prevent someone abusing your API otherwise, use an authentication method.