Looks like you need to tweak the shell’s origin settings.
https://osc.github.io/ood-documentation/latest/customizations.html?highlight=origin#fix-unauthorized-websocket-connection-in-shell-app