Waqas Ahmad — Software Architect & Technical Consultant

Specializing in

Distributed Systems

.NET ArchitectureCloud-Native ArchitectureAzure Cloud EngineeringAPI ArchitectureMicroservices ArchitectureEvent-Driven ArchitectureDatabase Design & Optimization

👋 Hi, I'm Waqas — a Software Architect and Technical Consultant specializing in .NET, Azure, microservices, and API-first system design..
I help companies build reliable, maintainable, and high-performance backend platforms that scale.

Experienced across engineering ecosystems shaped by Microsoft, the Cloud Native Computing Foundation, and the Apache Software Foundation.

Available for remote consulting (USA, Europe, Global) — flexible across EST, PST, GMT & CET.

View Projects Get in touch

CORS

Definition

Which origins can call from browser; configure allowed origins.

As defined in the knowledge graph

Cross-Origin Resource Sharing policy enforcement. — From: API Gateway vs BFF: When to Use Which
UseCors; preflight and responses handled in one place; must run before auth so OPTIONS succeeds. — From: .NET Core Middleware and Pipeline: In-Depth with Code Examples
Browser policy for cross-origin requests; API must allow frontend origin; never wildcard for credentialed. — From: Full-Stack .NET and Angular for Enterprise Applications
Cross-origin resource sharing; must be configured for SPA domain. — From: OAuth2 and OpenID Connect in .NET: In-Depth

Related concepts

Authentication Credentialed Request SPA

Articles mentioning this concept

API Gateway vs BFF: When to Use Which .NET Core Middleware and Pipeline: In-Depth with Code Examples Full-Stack .NET and Angular for Enterprise Applications OAuth2 and OpenID Connect in .NET: In-Depth Securing .NET APIs: Auth, Rate Limiting, and Headers