Does your project call its own server, for example fetch('/api/movies')?

• No. Your project only has pages, links and images, or it only uses other companies' services. You do not need to do anything here. Leave the API server section empty.
• Yes. Add one small file to your project so the installed app is allowed to talk to your server. Follow the steps below.

1. Open your project repository on GitHub.
2. Tap Add file, then Create new file.
3. In the file name box, paste this name. If you do not have a functions folder yet, typing the slash creates it for you.
   functions/_middleware.jsCopy
4. Paste the code below into the file and tap Commit changes. Cloudflare publishes it automatically.

const ORIGINS = ["https://localhost", "capacitor://localhost", "http://localhost", "app://localhost"];

export async function onRequest({ request, next }) {
  const o = request.headers.get("Origin");
  const ok = ORIGINS.includes(o);
  const h = {
    "Access-Control-Allow-Origin": o,
    "Access-Control-Allow-Methods": "GET,POST,PUT,DELETE,OPTIONS",
    "Access-Control-Allow-Headers": "Content-Type,Authorization",
    Vary: "Origin",
  };
  if (request.method === "OPTIONS") return new Response(null, { status: 204, headers: ok ? h : {} });
  const r = await next();
  if (!ok) return r;
  const n = new Response(r.body, r);
  for (const k in h) n.headers.set(k, h[k]);
  return n;
}

Already have a functions/_middleware.js file? Do not replace it. Add the ORIGINS line and the checks into your existing file, or ask your developer to merge them.