Spring Cloud Gateway - CORS issue (preflight request and response is success but actual request's response is FORBIDDEN)

Hello Together,

Below is my Global CORS configuration (i.e. in application.yml file) in the Spring Cloud API Gateway application and my preflight response is success.
But then the actual graphql micro service request is failed with 403 FORBIDDEN error.

Please help to solve the issue.

Note:

1. I didn't configure spring security (i.e. didn't add spring-boot-starter-security dependency) in both Spring cloud gateway application and graphql spring boot application (i.e. Micro service).
2. Except graphql micro service other normal spring boot application request and response is success via Spring Cloud API Gateway.

Spring Boot Version : 2.7.2

global cors configuration

 globalcors:
    add-to-simple-url-handler-mapping: true
    cors-configurations:
      '[/**]':
        allowedOrigins: "*"
        allowedHeaders: "*"
        allowedMethods: "*"

Prelflight Request and Response:

Actual Request and Response

Start with the application.yml global CORS configuration and compare the successful preflight request with the forbidden actual GraphQL request. Reproduce the behavior using Spring Boot 2.7.2 through the Spring Cloud Gateway, then determine what distinguishes the GraphQL route from the other successful Spring Boot application routes. Done means the actual request succeeds or the cause of the 403 is documented.