Thank you for your response,
I understand what cors does, the extent of my experience with cors is when running a node.js and express server where you allow cors* and everything is good. But I have no idea when it comes to construct, where would I configure Cors stuff when trying to access an API?
here are two failed attempts of mine,
now I can bypass this with a chrome extension that turns off cors but this wouldn't work for other users right, how can I fix this so other users won't have this issue?