Frontend & browser·The network from the browser
the request worked in curl and failed in the browser with a message about an Access-Control header.
CORS
Also calledcross-origin resource sharing
The protocol by which a server tells the browser which other origins may read its responses, using `Access-Control-Allow-*` headers. It is entirely enforced by the browser and entirely configured on the server, which is why no amount of client-side code fixes a CORS error. Wildcarding the allowed origin is fine for public data and forbidden with credentials, which is where most misconfigurations start.