Doesn't moving the API from the subdomain to the /api path on the same subdomain as the website solve the problem?
Doesn't moving the API from the subdomain to the /api path on the same subdomain as the website solve the problem?