you are supposed to redirect the user to Twitch.
Not fetch the URL in postman/another tool, this is why you are gettting a CORS error.
The first step of Authentation is a <a href="" or a redirect to the /authorize URL
1 Like