Extension development: video would help

Meanwhile, back at the rig…

Access to XMLHttpRequest at 'https://alexr.ca/srv/gr_hello/color/query' from
origin 'https://localhost.rig.twitch.tv:8080' has been blocked by CORS policy:
Response to preflight request doesn't pass access control check: No
'Access-Control-Allow-Origin' header is present on the requested resource.

EDIT: After porting the Hapi server based example to a simple node express setup,
requests are no longer blocked. I am able to query the current color.

EDIT 2: The color cycling post request times out and the server returns a 403.

EDIT 3: Fixed by increasing the token expiry time.