Attendee can't open webinar "Resources" - POST blocked by CORS policy

Meeting SDK Type and Version
Web, 3.5.2

Description
Zoom Meeting SDK for Web is integrated into a React application.
Webinar attendees using the app are unable to view webinar “Resources”.
When the “Resources” button is clicked, the resources panel opens but hangs on a loading spinner UI.

Error?
The above is accompanied the following errors logged to the browser console:

about:srcdoc:1
Access to XMLHttpRequest at 'https://marketplace.zoom.us/zoomapp/v1/appToken' from origin 'https://staging.app.domain.com' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.

whiteboard-sdk.js:86
POST https://marketplace.zoom.us/zoomapp/v1/appToken net::ERR_FAILED

zoomus-websdk-zoommtgMain.umd.min.js:2
Uncaught (in promise) o {message: 'Network Error', name: 'AxiosError', code: 'ERR_NETWORK', config: {…}, request: XMLHttpRequest, …}code: "ERR_NETWORK"config: {transitional: {…}, adapter: Array(2), transformRequest: Array(1), transformResponse: Array(1), timeout: 0, …}message: "Network Error"name: "AxiosError"request: XMLHttpRequest {onreadystatechange: null, readyState: 4, timeout: 0, withCredentials: false, upload: XMLHttpRequestUpload, …}stack: "AxiosError: Network Error\n    at w.onerror (https://source.zoom.us/3.5.2/ui/zoomus-websdk-zoommtgMain.umd.min.js:2:3121933)\n    at XMLHttpRequest.Vt (https://us02st1.zoom.us/web_client_whiteboard/lucuz2dq/dist/js/whiteboard-sdk.js:86:1134227)"[[Prototype]]: Error

I’m also able to reproduce this issue using the simple Meeting SDK React sample.

Is this caused by a bug in the Zoom Meeting SDK for Web?

This is still an issue with 3.6.0.