Error code

cors_forbidden (403)

What it means

The browser Origin isn't in the game's allowed_origins. The classic 'works locally, 403s once deployed' trap.

How to fix

Add your deployed origin to allowed_origins (dashboard → CORS, or triggair_set_allowed_origins). An empty allowlist is open to any origin.