I have a CORS issue where I am calling Avatax API. Would I need to set up the configuration to

Access-Control-Allow-Origin

inside SCA for

preflight check

or use JSONP or is there possibly something else I am doing wrong? I know the request is valid because I can hit the avalara's sandbox API endpoint with no issues. And also in POSTman. Right now it is just being made via an AJAX call. I don't know if this would help, but if I moved it to a service

ss

file, would that possibly fix the issue?