Thank you so much for such a elaborate explanation. I really appreciate it. But somehow it didn’t work. Kindly suggest if i am doing something wrong

*SO we did two things *

1. Node.js level changes . I added * just for testing to app.js file

As suggested, we have made the change in app.js at NodeJS level and set Access-Control-Allow-Origin to *.
Code Snippet:
app.use(function (req, res, next) {
  /*var err = new Error('Not Found');
   err.status = 404;
   next(err);*/

  // Website you wish to allow to connect
  res.setHeader('Access-Control-Allow-Origin', '*');

  // Request methods you wish to allow
  res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS, PUT, PATCH, DELETE');

  // Request headers you wish to allow
  res.setHeader('Access-Control-Allow-Headers', 'Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers,X-Access-Token,XKey,Authorization');

//  res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept");

  // Pass to next layer of middleware
  next();
});

1. I changed my virtual host in apache and added * there too for testing . BUt it didnt work. Still same error is coming like before . This is under /etc/apache2/sites-available/000-default.conf

<VirtualHost *:443>
ServerName app.getmanagly.com
ServerAdmin webmaster@localhost
DocumentRoot /var/www/hare_krishnanew
ErrorLog ${APACHE_LOG_DIR}/error_app.log
CustomLog ${APACHE_LOG_DIR}/access_app.log combined
SSLEngine on
SSLCertificateFile /home/ssl/star.getmanagly.com.crt
SSLCertificateKeyFile /home/ssl/getmanagly.key
SSLCACertificateFile /home/ssl/star.getmanagly.com.ca-bundle
Header set Access-Control-Allow-Origin "*"
</VirtualHost>

The same error comes again

Access to XMLHttpRequest at ’https://app.getmanagly.com:3008/login/member/validateMember’ from origin ’https://app.getmanagly.com’ has been blocked by CORS policy: The ‘Access-Control-Allow-Origin’ header has a value ’https://app.getmanagly.com:3008’ that is not equal to the supplied origin.

After that i tried everything in apache file instear of “*”
https://app.getmanagly.com
https://app.getmanagly.com:443
https://app.getmanagly.com:3008

nothing seems to be working