CORS not working

I’m facing an issue when trying to access one of my microservices behind the express-gateway on a localhost:

Failed to load http://localhost:8080/data: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://localhost:8888' is therefore not allowed access.

My gateway.config.yml

http:
  port: 8080
admin:
  port: 9876
  hostname: localhost
apiEndpoints:
  data-api:
    host: localhost
    methods: 'GET,POST,PUT' 
    paths: '/data' 
  product-api:
    host: localhost
    paths: '/products' 
serviceEndpoints:
  data-svc:
    url: 'http://localhost:8282'
  product-svc:
    url: 'http://localhost:6000'
policies:
  - cors
  - jwt
  - proxy
  - rate-limit
pipelines:
  data:
    apiEndpoints:
      - data-api
    policies:
      - cors:
          - action:
              origin: "*"
              methods: 'HEAD,PUT,PATCH,POST,DELETE'
              allowedHeaders: "Origin, X-Requested-With, Content-Type, Accept"
              preflightContinue: true
      - rate-limit:
          - action:                         # allow
              max: 10                       # max 10 request
              windowMs: 120000              # per 120 seconds
      - jwt:
          - action:
              secretOrPublicKeyFile: ./key/pubKey.pem
              checkCredentialExistence: false    

  products:
    apiEndpoints:
      - product-api
    policies:
      - proxy:
          - action:
              serviceEndpoint: product-svc 
              changeOrigin: true

Any suggestions?

[NomadXD]

@WesleyFaveri yeah it was like 1 year ago. I think the issue was I haven’t added OPTIONS method to the method list under policies. For a working example , please check this https://gist.github.com/NomadXD/05956bfe4158fee674d22fb7078cc5bb

[TietjeDK]

Yes, i removed methods from apiEndpoints: data-api: host: localhost methods: 'GET,POST,PUT' paths: '/data' and it worked