Serve this page from the SAME origin as your provider backend, so /internal/issue-agent-jwt resolves without CORS.
/internal/issue-agent-jwt