title: Permitting CORS in Flask
body: <p>I've a flask endpoint where I've permitted CORS in the following manner. </p>
  
  <pre><code>app = Flask(__name__)
  CORS(app, resources={r"/api/*": {"origins": "*"}})
  app.register_blueprint(store, url_prefix='/api/')
  </code></pre>
  
  <p>I still run into the following issue.</p>
  
  <blockquote>
    <p>Response to preflight request doesn't pass access control check: The value of the 'Access-Control-Allow-Credentials' header in the response is '' which must be 'true' when the request's credentials mode is 'include'. Origin '<a href="http://something.com:8888" rel="nofollow noreferrer">http://something.com:8888</a>' is therefore not allowed access.</p>
  </blockquote>
  
  <p>Any suggestions as to how I can fix this.</p>