with a cors issue like this, some clients will be able to zap, but some will not
to demo the failure, you can set up a separate nostr account and attempt a zap from a web client like Yakhonne or Nostrudel
nostr:npub1de6l09erjl9r990q7n9ql0rwh8x8n059ht7a267n0q3qe28wua8q20q0sd couldn't zap me, he seems to be using nostr:npub1jluy3twvf338v6zlujzzdhjkzjy8ezj34ksydr8vw8a6jwp89ygshpp2kq — no problems with zaps from nostr:npub12vkcxr0luzwp8e673v29eqjhrr7p9vqq8asav85swaepclllj09sylpugg (i remember at least one that worked)
Discussion
ah it is about the client and not the lightning provider beeing used. cause i got two zaps from you, i guess not from yakhonne or nostrudel?
yes, CORS is something enforced by web browsers... very confusing...