Erreur CORS Access-Control-Allow-Headers avec l'API après la mise à jour de Discourse

I have read the User API keys specification

In my case I have SSO with a frontend app in javascript, Could I consuming the API without using the authorization UI for every user? I would like a way that a could use de api-username … is that possible?

Regards