I have a NodeJS backend application running on api.myapp.com and have whitelisted all the required Frontend Origins including myapp.com .