post man reponse is okay and I have something like this:

// Step 6: Send response with correct headers
    return ContentService.createTextOutput(jsonResponse)
      .setMimeType(ContentService.MimeType.JSON)
      .setHeader("Access-Control-Allow-Origin", "*");  // Allow cross-origin requests

  } catch (error) {
    return ContentService.createTextOutput(JSON.stringify({ error: error.message }))
      .setMimeType(ContentService.MimeType.JSON);
  }
}