Always, you can use CORS proxy but I never set one up, CORS issues mostly affecting services which are designed to be public anyway so I just ask them to add CORS headers