I suppose you have also done the first part from that post, that is using a CORS filter. We had a similar thing a couple of weeks ago on our DEV server and we had to change this line to explicitly mention all the domains instead of using "*".
B4X:
' ConfigureCORS(srvr, "/*", "*", "*", "*") ' did not work anymore
' to:
ConfigureCORS(srvr, "https://api.wittouck.eu,https://work.wittouck.eu,http://localhost", "*", "*", "*")