I'm developing an API and trying to use Username-Password OAuth with CORS, but still running into an error. I found an article from a couple years back saying that it will only work with User-Agent OAuth. Is that truly the case, or is there a way around this?

Thanks,
Matt