In a relevant Backend/Frontend :

    http-response set-header "Access-Control-Allow-Methods" "GET, POST, PUT, DELETE, OPTIONS" if METH_OPTIONS
    http-response set-header "Access-Control-Allow-Credentials" "true" if METH_OPTIONS
    http-response set-header "Access-Control-Allow-Headers" "Content-Type, Accept Content-Length: 0" if METH_OPTIONS
    http-response set-header Access-Control-Allow-Origin *