Who has the responsibility to handle CORS?

Question

I\'m developing a GraphQL API on Laravel for mobile and web applications. One of the frontend developer asking me to disable CORS on the server side because he cannot work w