Bypass CORS when fetching token for SMART on FHIR application

That’s just a question of configuring Apache within the container, which is certainly doable. Are you using a stock container or the live-development flex docker?

Either way, the solution will be the same – connect a shell to the docker, navigate to /etc/apache2 (is it /etc/httpd? I forget), configure Apache to honor OPTIONS, and reload it. (Restarting it will keep the container from actually coming back up if you got the config wrong, and repairing the filesystem of a non-functioning container is annoying.)