{
  "id": "portal-cors-credential-read-contract",
  "synthetic": true,
  "function": "cors",
  "scope": [
    "No live cross-origin requests, proxy bypass, cookie changes or production security changes. Embedded-login storage and access-control tests remain separate.",
    "不发真实跨域请求、不绕代理、不改Cookie或生产安全设置；嵌入登录存储和权限测试仍独立。"
  ],
  "cases": [
    {
      "args": [
        "https://portal.example",
        true,
        "*",
        true
      ],
      "expected": false
    },
    {
      "args": [
        "https://portal.example",
        true,
        "https://portal.example",
        true
      ],
      "expected": true
    },
    {
      "args": [
        "https://portal.example",
        true,
        "https://portal.example",
        false
      ],
      "expected": false
    },
    {
      "args": [
        "https://portal.example",
        false,
        "*",
        false
      ],
      "expected": true
    }
  ]
}