Request header field authorization is not allowed by Access-Control-Allow-Headers in preflight response

Can you take a look at this thread, where I recommended having an HTTP Close card in your flow to ensure that even if your flow takes more than 60 seconds to complete, that you are responding back to Okta before the connection times out.