xmlhttprequest - Access-Control-Allow-Origin: "*" not allowed when credentials flag is true, but there is no Access-Control-Allow-Credentials header - Stack Overflow
Allow Access-Control-Allow-Origin for Custom Menu
Phalcon Micro REST API CORS header 'Access-Control-Allow-Origin' missing - Discussion - Phalcon Framework
How to troubleshoot CORS error in Azure API Management service - Microsoft Community Hub