If anyone else comes across this issue in the future, this was the issue and “solution” for me. I think the documentation/guides for setting up the provider should be updated with the information about policy + cors. I’ll make a PR for that once I get time