Access to resource has been blocked by CORS policy

curl -X POST 'https://my_link.supabase.co/rest/v1/rpc/my_function' \
-d '{ "param1": "value", "param2": "value" }' \
-H "Content-Type: application/json" \
-H "apikey: SUPABASE_KEY" \
-H "Authorization: Bearer SUPABASE_KEY"

window.addEventListener("unload")

function invokeFunction() {
    const url = 'https://my_link.supabase.co/rest/v1/rpc/my_function'
    const supabaseKey = 'my_key'

    const customHeaders = {
      type: 'application/json',
      apikey: `${supabaseKey}`,
      Authorization: `Bearer ${supabaseKey}`,
    };

    const body = {
      param1: value1,
      param2: value2
    };
    const blob = new Blob([JSON.stringify(body)], headers)

    navigator.sendBeacon(url, blob)
  }

Access to resource at 'https://my_link.supabase.co/rest/v1/rpc/my_function' from origin 'my_hosted_url' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'.