i try to fetch elastic api using javascript with basic authentication, but there is error show that request header field authorization is not allowed by acccess-control-allow-headers, is it something wrong with the elasticsearch api or the wrong is on my code? i already setting enable cors on elastic, i tried curl to get elastic data with auth and it works, does the fetch code is wrong?

the console error :

the fetch code :

        fetch('http://192.168.150.220:9900/', {method:'GET', 
        headers: {'Authorization': 'Basic ' + btoa('em_user:3md@t@2o22')}})
        .then(response => response.json())
        .then(json => console.log(json));