AppFoundry Web Message API CORS Blocking in Safari

I’m trying to figure out why the Genesys Cloud Web Message API is returning CORS errors specifically in Safari 17, despite working in Chrome and Firefox. The integration is deployed via AppFoundry and uses the standard postMessage pattern for token exchange, but Safari blocks the origin check with a 403 Forbidden on /api/v2/authorizations. Has anyone encountered browser-specific CORS issues with the embedded widget SDK 1.2.4?