@startuml
skinparam backgroundColor white
skinparam defaultFontColor black
skinparam ArrowColor black
skinparam SequenceLifeLineBorderColor black
skinparam SequenceLifeLineBackgroundColor #F8F8F8
skinparam ParticipantBorderColor black
skinparam ParticipantBackgroundColor #EDEDED
skinparam NoteBorderColor black
skinparam NoteBackgroundColor #FFF8CC
title Before: Preflight Falls Through to 404

participant Browser as B #E3F2FD
participant "Axum Dispatcher\n(any /{*path})" as D #E8F5E9
participant "CorsMiddleware\n(exact-match only)" as C #FFF3E0
participant "Auth Route Resolver\n(core + plugins)" as R #FFEBEE

B -> D: OPTIONS /sign-in/email\nOrigin: https://preview.example.vercel.app
D -> C: before_request(req)
note right of C
allowed_origins is not wired from runtime config,\nand origin matching does not support preview wildcards.
end note
C --> D: None (no preflight response)
D -> R: continue dispatch
R --> D: 404 No handler for OPTIONS /sign-in/email
D --> B: 404 Not Found

@enduml
