A wildcard '*' cannot be used in the 'Access-Control-Allow-Origin' header

[arunlals]

GET https://graph.facebook.com/v2.8/oauth/access_token?client_id=37205331650849…uE88_1jFF0Sj4eNMINFswpXaUNTWVYK380qwn8P4Jyjty7JUCNmFs9NpCnN5P06HE2S9vJwCEy 400 ()
Request.end @ request.js:117
Request.end @ request.js:1438
end @ request.js:566
(anonymous) @ request.js:580
onNextTick @ main.js:64
Item.run @ browser.js:153
drainQueue @ browser.js:123
?code=1:1 XMLHttpRequest cannot load https://graph.facebook.com/v2.8/oauth/access_token?client_id=37205331650849…uE88_1jFF0Sj4eNMINFswpXaUNTWVYK380qwn8P4Jyjty7JUCNmFs9NpCnN5P06HE2S9vJwCEy. A wildcard '*' cannot be used in the 'Access-Control-Allow-Origin' header when the credentials flag is true. Origin 'http://localhost:7000' is therefore not allowed access. The credentials mode of an XMLHttpRequest is controlled by the withCredentials attribute.