For those that have tried all the methods (vercel.json, options allowlist under vercel deployment protection) and still unable to resolve. Another possible reason is due to vercel authentication under deployment protection. Turning it off solve my issue, still trying to figure out the proper way to have it on and make it work.