CORS warning: Your browser may block cross-site API calls even with correct auth.
If you see errors like TypeError: Failed to fetch or “CORS policy”, run this as a Tampermonkey script
(or use a proxy). The pipeline logic here is correct; the browser may just refuse the request.