title: Stripe authorization redirect response for preflight is invalid or requires "Access-Control-Allow-Origin" Header(redirect)
body: <p>Trying to follow the <a href="https://github.com/stripe/stripe-connect-rocketrides" rel="nofollow noreferrer">Stripe Connect Rocket Rides Github Repo</a> I am unable to do a redirect from my https webpack-dev-server using fetch. As you can see I am making a get request.</p>
  
  <pre><code>    return fetch(`https://localhost:3443/stripeAuthorize`, {
        method: 'GET',
        headers: {
          "Access-Control-Allow-Origin": "https://localhost:3443",
          'Accept': '*/*',
        }
      })
      .then((data) =&gt; {
        return data.json()
      })
      .then((json) =&gt; {
        console.log('redirectjson', json)
      })
      .catch((err) =&gt; {
        console.log('stripe redirect err caught: ', err)
      })
  </code></pre>
  
  <p>Looking inside the network tab of chrome I see status code '303 See Other' on both OPTIONS and GET</p>
  
  <p>Request Headers:</p>
  
  <pre><code>Accept:*/*
  Accept-Encoding:gzip, deflate, br
  Accept-Language:en-US,en;q=0.8,es;q=0.6,th;q=0.4,zh-TW;q=0.2,zh;q=0.2,la;q=0.2,ja;q=0.2
  Access-Control-Request-Headers:access-control-allow-origin
  Access-Control-Request-Method:GET
  Cache-Control:no-cache
  </code></pre>
  
  <p>I do notice that the GET network call is above the OPTIONS which is passed in by the browser, it seems odd the GET call would precede OPTIONS. I can't seem to get any other information from stripe or the http protocol. No error calling on the server</p>
  
  <p>How can I debug this issue and why is the stripe redirect not working?</p>
  
  <p>EDIT: I thought I made it clear that if I remove "Access-Control-Allow-Origin" I get the err:</p>
  
  <blockquote>
    <p>Failed to load
    <a href="https://connect.stripe.com/express/oauth/authorize?client_id=ca_BR4uV37xvFoKjLE5g9g2wzcmYNT0jnXZ&amp;state=xy5z4k7lpe7rkwyerlxv9rudi&amp;stripe_user%5Bbusiness_type%5D=company" rel="nofollow noreferrer">https://connect.stripe.com/express/oauth/authorize?client_id=ca_BR4uV37xvFoKjLE5g9g2wzcmYNT0jnXZ&amp;state=xy5z4k7lpe7rkwyerlxv9rudi&amp;stripe_user%5Bbusiness_type%5D=company</a>:
    No 'Access-Control-Allow-Origin' header is present on the requested
    resource. Origin '<a href="https://localhost:3443" rel="nofollow noreferrer">https://localhost:3443</a>' is therefore not allowed
    access. If an opaque response serves your needs, set the request's
    mode to 'no-cors' to fetch the resource with CORS disabled.</p>
  </blockquote>