A CORS error can occur if the endpoint returns a 40* error (eg. if you are not logged in). Can you please check if you have an active session in Okta and are sending the withCredentials=true attribute in the CORS request?
You don’t need to make a request to the /me endpoint yourself. You can use the Angular SDK for that. this.oktaAuth.getUser() should return all the same information.
To fix the CORS issues, make sure you have http://localhost:4200 listed in API > Trusted Origins.
Try setting your scopes is set to openid profile and see if that helps. From the docs:
scopes(optional) : Reserved for custom claims to be returned in the tokens. Defaults to ['openid'] , which will only return the sub claim. To obtain more information about the user, use openid profile . For a list of scopes and claims, please see Scope-dependent claims for more information.