Why does preflight fail on newer Android devices but not desktop?

For reference, I am using the Axios package to send API requests: axios - npm

I’ve setup my network security configuration for Android.

I’m using Laravel as my backend and the CORS rules are:

  • allowed_origins => *
  • allowed_headers => *
  • paths => *

Yet, it still fails:

It’s important to note here than only on newer devices does the request fail, on Android 8 or below devices it works without issue.