Access-Control-Allow-Origin

[devalexandre]

has been blocked by CORS policy: The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'. The credentials mode of requests initiated by the XMLHttpRequest is controlled by the withCredentials attribute.

when I try use with react display it, but my api work, in my file cors.js are * in origin