When calling an API using isomorphic-fetch and the Fetch API, I encountered a CORS issue because the API was hosted on a different domain (this worked fine in production).
To work on development locally, I had to run Chrome browser in non-secure mode and include { credentials: "include" } in the request headers to ensure cookies were sent along with the request.
Despite receiving a 200 OK response, my dev domain being localhost.abc.com:8080, and the API being hosted on myapi.abc.com, I was unable to read the response due to the following error:
The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'
This experience made me realize the benefits of jQuery AJAX calls compared to the Fetch API in this specific case.