Cloudflare blocking CORS even tho set up on ruby side

For Workers & Pages, what is the name of the domain?

hack-code.net

What is the error number?

403

What is the error message?

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at Sign in ・ Cloudflare Access. (Reason: CORS header ‘Access-Control-Allow-Origin’ missing). Status code: 403.

What is the issue or error you’re encountering

CORS header ‘Access-Control-Allow-Origin’ missing

What steps have you taken to resolve the issue?

I set up cors on ruby side. CORS.rb, application_controller.rb

Screenshot of the error