has been blocked by CORS policy: The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's ...
has been blocked by CORS policy: The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'. The credentials mode of requests initiated by the XMLHttpRequest is controlled by the withCredentials attribute
這個錯誤是由於同時設置了 Access-Control-Allow-Origin=* 和 Access-Control-Allow-Credentials=true
解決辦法是把*改為指定地址
