OPTIONS localhost../.well-known/openid-configuration throws CORS Missing Allow Origin

@fabien4vo reported this error to me

I haven't been able to replicate it using Postman (interestingly using GET works for us both)