Facing a `CORS error`.

[Abdallah Abis]

I have cloned and updated the .env variables, but I'm getting a CORS error

The same issue that I've faced using the CURL API, I believe I need to add something to my Shopify backend, could you please guide me on how to do that. it would be really appreciated.
Also, isn't it a security venerability to provide the Access token in the header of the call? and is there a better solution?

Thanks in advance.