Access-Control-Allow-Origin: http://localhost:3000 Or for development:
(not recommended for regular browsing)
(development only) Extensions like Moesif CORS or Allow CORS can add the required headers on the fly — but never rely on this in production. cors policy chrome