No 'Access-Control-Allow-Origin' header is present on the requested resource

Seems like it has something do with CloudFlare and Auth0’s setup with them, that’s the best guess I’ve come across.