Hello guys, I have been exploring and hosted ory hydra(v1.9.0) and everything is working fine when I use Postman but when calling APIs from front end(localhost) it's giving me cors error. the console looks like this-

Access to XMLHttpRequest at '<https://login.xyz/oauth2/token>' from origin '<http://localhost:8080>' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.

rollbar.umd.min.js?8391:1 {"message":"Network Error","name":"Error","stack":"Error: Network Error\n at createError (webpack-internal:///./node_modules/axios/lib/core/createError.js:16:15)\n at XMLHttpRequest.handleError (webpack-internal:///./node_modules/axios/lib/adapters/xhr.js:83:14)\n at t._rollbar_wrapped.t._rollbar_wrapped (webpack-internal:///./node_modules/rollbar/dist/rollbar.umd.min.js:1:20128)","config":{"url":"<https://login.xyzoauth2/token>","method":"post","data":"grant_type=authorization_code&code=6WDg7pkuPNdFcmq3iy-1jCJJagXSG0GL9hAj5LCFz8A.NN1yCU06n0dHtiVqVDI0-N09lOSfSxPlmnyqldyceIc&redirect_uri=http%3A%2F%2Flocalhost%3A8080%2Fcallback&client_id=ff8c4a76-9563-4fc8-9e12-83d43ca6aeec&client_secret=J70WgtNs.uoM7mokorckeFGGqp","headers":{"Accept":"application/json, text/plain, /","Content-Type":"application/json;charset=UTF-8","Access-Control-Allow-Origin":"<http://localhost:8080>"},"transformRequest":[null],"transformResponse":[null],"timeout":0,"xsrfCookieName":"XSRF-TOKEN","xsrfHeaderName":"X-XSRF-TOKEN","maxContentLength":-1}}

rollbar.umd.min.js?8391:1 POST <https://login.xyz/oauth2/token> net::ERR_FAILED

any ideas?

@steep-summer-29793 I believe this is related to CORS settings. You calling API from http*s* endpoint but access-control-allow-origin uses http

Hey, I tried with https also after deploying it on server and tried after disabling cors also but still same error.