Managed to figure out the CORS problem and solve it from the backend side (sunnex/settings.py) using the following steps:
1- run pip install django-cors-headers
2- add CORS_ALLOW_ALL_ORIGINS = True and CORS_ALLOW_CREDENTIALS = True anywhere in the file (temporarily)
3- add 'corsheaders' to INSTALLED_APPS
4- add 'corsheaders.middleware.CorsMiddleware' to MIDDLEWARE
and the CORS policy would allow the web client to access the APIs.
Later on, we modify these when we're ready for deployment:
CORS_ALLOW_ALL_ORIGINS = False
CORS_ALLOWED_ORIGINS = [
"https://yourdomain.com",
"https://app.yourdomain.com",
]
