dev.app.com and api.app.comAccess to api.app.com from origin from dev.app.com has been blocked due to missing access-control-allow-origin header.CORS headers in my Java API backend api.app.com domain now has Access-Control-Allow-Origin: https://dev.app.com header setup.