> When responding to a credentialed request, th...

# ktor

[cy]

When responding to a credentialed request, the server must specify an origin in the value of the Access-Control-Allow-Origin header, instead of specifying the "*" wildcard.