That CORS error? It wasn't my code

I learned something interesting while debugging Apache, Express, and CORS.

Seeing a CORS error in the browser doesn't necessarily mean your Express CORS configuration is broken.

I had a frontend sending requests to an API through Apache:

Frontend → Browser → Apache → Express (server.js)

The browser was showing a CORS error.