Like Stefan Isele has already mentioned it seems that spring security redirects or doesn't add the CORS header so that's why the request seems to be broken. So while spring security is checking the authentification it has to add the proper header. Enhance the article with your Gutachten. Contribute to https://hughr517vwx5.wikibestproducts.com/user