Under attack mode blocking legit traffic

Hello,

after enabling the under attack mode, I can access my front-end server, but when I try to login (hence sending a request to my API) I get a 503 coming back from the OPTIONS request.

Any help would be greatly appreciated

Mike