Thanks for taking the time to report the issue! Fixed.

You are 100% right: This only addresses the problem from the browser's point of view. Thanks for the feedback and for bringing up the issue.

Hi, you are right! That's not the use case for what's described. I don't see why would you implement a proxy server if the API service you are using handles credentials authorization with allowed domains. That's stated on the article.