CORS not working

[howardgy]

Self Checks

• I have searched for existing issues search for existing issues, including closed ones.
• I confirm that I am using English to submit this report (我已阅读并同意 Language Policy).
• [FOR CHINESE USERS] 请务必使用英文提交 Issue，否则会被关闭。谢谢！:）
• Please do not modify this template :) and fill in all the required fields.

1. Is this request related to a challenge you're experiencing? Tell me about your story.

my .ENV is set as default:
WEB_API_CORS_ALLOW_ORIGINS=*
CONSOLE_CORS_ALLOW_ORIGINS=*

but when my html page need to fetch the api 'http://192.168.88.144:8080/v1', to listen for streaming,
the browser always pop up errors:

//JS starts ======================================================
const apiUrl = 'http://192.168.88.144:8080/v1';
const eventSource = new EventSource(apiUrl, {
headers: {
'Authorization': 'Bearer app-ycYinfSsr5RxrPAfmkzfd***'
}
});

eventSource.onmessage = function (event) {
const data = JSON.parse(event.data);
const text = data.text;
$('#ai_whos_on_duty_displaying').append(text);
};

eventSource.onerror = function (error) {
console.error('EventSource failed:', error);
eventSource.close();
};
//JS ends ======================================================

and the browser says:
Access to resource at 'http://192.168.88.144:8080/v1' from origin 'http://192.168.125.21' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.
EventSource failed
GET http://192.168.88.144:8080/v1 net::ERR_FAILED 308 (PERMANENT REDIRECT)

I'm gessing if it has anything to do with the altered port 8080?
Tried all day to solve this but not working.

2. Additional context or comments

No response