Hello @dan,
Thanks a lot for your fast reaction!
I'm using FusionAuth 1.24.0, and yes there is a reverse proxy to reach it.
It was the same with several browsers.
Thank you, the solution was what you suggested 
We manually added the header "Access-Control-Allow-Origin": window.location.origin in our call to /oauth2/token, and it worked 