How to make Google Apps Script to be executed as an user accessing it without CORS error

Question

I have a Google App Script deployed as a Web app that gets direction info based on query parameters via DirectionFinder.

And there is also a front end ap