=== Uplink7 Cors Access-Control ===
Contributors: uplink7
Tags: cors, access-control, security, api, rest-api, graphql, headers
Requires at least: 5.0
Tested up to: 6.4
Stable tag: 1.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Advanced CORS management for WordPress. Manage origins, methods, and headers with ease. Supports REST API, GraphQL, and AJAX.

== Description ==

Uplink7 Cors Access-Control provides an intuitive user interface to control Cross-Origin Resource Sharing (CORS) settings for your WordPress website. It is the ideal solution for developers connecting headless systems, mobile apps, or external APIs.

The free version offers all the basic tools for global CORS management, while the premium version provides granular control and professional debugging tools.

Features (Free):

Allowed Origins: Define specific domains or use wildcards (*).

Allowed Methods: Control GET, POST, PUT, DELETE, and OPTIONS.

Header Management: Configure Access-Control-Allow-Headers and Access-Control-Expose-Headers.

Credentials Support: Support for cookies and auth headers (Credentials).

Preflight Caching: Optimize performance by setting the Max-Age.

Developer Support: Seamless integration with the WordPress REST API and WPGraphQL.

Premium Features:

Endpoint Rules: Set different CORS rules for specific URL paths or API endpoints (including RegEx support).

Error Logging: Log rejected CORS requests directly in the database to identify connection errors in seconds.

Priority Support: Get fast assistance directly through the dashboard.

== Installation ==

Upload the plugin folder to the /wp-content/plugins/ directory or install it directly via the WordPress backend.

Activate the plugin in the 'Plugins' menu.

Go to 'Settings' -> 'CORS Settings' to configure your settings.

== Frequently Asked Questions ==

= Why are my requests still being blocked despite permission? =
Ensure that you are not using a wildcard (*) for the Origin when "Allow Credentials" is enabled. Browsers block this unsafe combination. The plugin will display a security warning for this.

= Does the plugin support regular expressions (RegEx)? =
Yes, in the Premium version, you can use complex RegEx patterns for paths within the "Endpoint Rules."

== Screenshots ==

The general settings page for global CORS management.

The premium view for granular endpoint rules.

The error log dashboard for troubleshooting.

== Changelog ==

= 1.0 =

Initial release.