Hello 👋, While using Ory Network, I needed to also use Oathkeeper. Now, the upstream I use, Adds its mandatory CORS headers to response it sends. Also, Oathkeeper also add its CORS headers while returning response. So, I am consistently getting multiple "Access-Control-Allow-Origin" and that results in error showing it expected one 'Access-Control-Allow-Origin' but got multiple "Access-Control-Allow-Origin" . What can be way to remove the upstream response headers or Oathkeeper CORS headers so that this problem can be solved? Any suggestion will be helpful.

Seems like you’re including the CORS keys in your settings. If you don’t need them, because they’re set by upstream, you could remove those: https://www.ory.sh/docs/oathkeeper/reference/configuration

@bland-eye-99092 you mean I disable CORS? Actually when I disable CORS in oathkeeper. Then browser gives CORB error because the browser is receiving CORS response headers from upstream.