You want to allow only two specific websites to access your FastAPI API with all HTTP methods and headers. Which CORS middleware setup is correct?
Aapp.add_middleware(CORSMiddleware, allow_origins=["*"], allow_methods=["*"], allow_headers=["*"])
Bapp.add_middleware(CORSMiddleware, allow_origins="https://site1.com,https://site2.com", allow_methods=["GET", "POST"], allow_headers=["*"])
Capp.add_middleware(CORSMiddleware, allow_origins=["https://site1.com", "https://site2.com"], allow_methods=["*"], allow_headers=["*"])
Dapp.add_middleware(CORSMiddleware, allow_origins=["https://site1.com", "https://site2.com"], allow_methods="*", allow_headers="*")