allow cors

apps/web/next.config.mjs

@@ -19,6 +19,23 @@ const config = {
     locales: ['en'],
     defaultLocale: 'en',
   },
+  async headers() {
+    return [
+      {
+        source: '/api/sdk/:path*',
+        headers: [
+          { key: 'Access-Control-Allow-Credentials', value: 'true' },
+          { key: 'Access-Control-Allow-Origin', value: '*' },
+          { key: 'Access-Control-Allow-Methods', value: 'POST,PUT' },
+          // {
+          //   key: 'Access-Control-Allow-Headers',
+          //   value:
+          //     'X-CSRF-Token, X-Requested-With, Accept, Accept-Version, Content-Length, Content-MD5, Content-Type, Date, X-Api-Version',
+          // },
+        ],
+      },
+    ];
+  },
 };
 
 export default config;