Hi @macrobartfast, I just happened to try CORS with swagger today. I modified the middleware.clj like this. It worked.

(defn wrap-base [handler]
  (-> ((:middleware defaults) handler)
      wrap-auth
      wrap-webjars
      wrap-flash
      (wrap-cors :access-control-allow-origin [#""]
                 :access-control-allow-methods [:get :put :post :delete])
      (wrap-session {:cookie-attrs {:http-only true}})
      (wrap-defaults
       (-> site-defaults
           (assoc-in [:security :anti-forgery] false)
           (dissoc :session)))
      wrap-internal-error))

I got certain problems when I directly moved regex pattern #"" to env/dev/resources/config.edn Finally, I put only string part at env/dev/resources/config.edn and I wrote code like (re-pattern (:cors-regex-str env)) to create regex pattern.