I found the problem. This is very stupid -

I changed the line

 const app = await NestFactory.create(AppModule, { cors: true });

on

 const app = await NestFactory.create(AppModule);

It rewrote the Origin header