Browser
https://app.example
Same-origin policy checkpoint
OPTIONS
GET
200 + CORS
Blocked by browser
API Server
https://api.vendor.test
Name
Method
Status