Code works perfectly on my local setup. Deployed it to Vercel and the API routes are completely broken due to a CORS issue.

Why does CORS exist to torment us? Spend 5 hours coding the feature, spend 5 hours fixing CORS headers.