Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Hey, first time I heard of it. Have you updated CLI to the latest version?

I did. Weird enough, my local dev (Mac M1 ARM64) works fine, not the test environment on a virtual server AMD64. I did pull the latest image on both env. It could be *traefik* that doubles some of the headers? In any case, it seems that calling the token endpoint directly (without using a CLI tunnel) now works with CORS, so I should not be needing the tunnel in test environment anymore.

Maybe this is related? <https://github.com/ory/network/issues/316>

it does look a lot like it is related indeed, thanks!