Cross-site issue with oauth provider plugin

const tokenResponse = await fetch('https://democraft.fun/api/auth/oauth2/token', {
            method: 'POST',
            headers: {
              'Content-Type': 'application/x-www-form-urlencoded',
              'Origin': 'https://democraft.fun',
              'Referer': 'https://democraft.fun/',
            },
            body: tokenParams,
          });
// Logs
ℹ [auth:democraft] token:start { callbackUrl: 'http://localhost:3000/api/auth/callback/democraft' }
ℹ [auth:democraft] token:failed { status: 403, body: { rawBody: 'Cross-site POST form submissions are forbidden' } } 

export const auth = betterAuth({
    appName: "DEMOCRAFT",
    emailAndPassword: {
        enabled: true,
    },
    database: prismaAdapter(prisma, {
        provider: 'postgresql',
    }),
    disabledPaths: [
        "/token",
    ],
    plugins: [
        jwt(),
        twoFactor(),
        oauthProvider({
            loginPage: "/auth/login",
            consentPage: "/auth/consent",
            scopes: ["openid", "profile", "email", "offline_access", "stats"],
        }),
        stripe({
            stripeClient,
            stripeWebhookSecret: secretWebhook,
            createCustomerOnSignUp: true,
        })
    ]
});