What you need to know

A page can display a generic error for a wrong URL, blocked preflight request, invalid body, expired session, or server exception. The Network panel shows which layer failed.

How to apply it

Filter requests by Fetch/XHR, reproduce the action, inspect status and response, and compare the request shape with the backend contract. Check the server logs using a safe request ID if available.

Common mistake to avoid

Do not assume a CORS message means the API is down. Verify the actual request and server response before changing security headers.