Sounds like you are building a JavaScript app and making the API requests from the browser?
The recommended approach would be to make the API calls to Discourse server side, and have your JavaScript app talk to your server just how it talks to WordPress. This way you avoid any CORS issues.