Missing CORS header: Cannot perform an API request - can I configure allowed origins?

When trying to fetch data from the authentik-API i run into an error:

Cross-source (cross-origin) request blocked: The same-source rule prohibits reading the external resource on https://myexampleproject.com/api/v3/core/users/. (Reason: CORS header 'Access-Control-Allow-Origin' is missing). Status code: 403

I tried different endpoints, everytime I get the same result.

Everything else works fine, I can authenticate, I can use the API-Browser etc..

Is there a possibility I have overlooked to set the 'Access-Control-Allow-Origin' in the admin area, or is there a bug here?

- authentik version: [2024.10.1]
- Deployment: docker-compose