I think it might be helpful to understand the flow from a high level to help you further. Because right now I’m bit confused on the ordering / actors involved and what the difference between what is supposed to happen and what is happening.

Doesn’t have to be a great diagram. Something shitty like this diagram below.

I don’t have experience with web sockets in godot but I do have experience in web development

I assume it’s because you are hosting the game from somewhere other than where you are trying to connect.

A look at this article should help. https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/CORS#examples_of_access_control_scenarios

You’ll need to send some extra headers that will allow the browser to connect to it.

I think this one? https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/CORS#access-control-allow-origin

I only ever set it to * and forgot about it when I have done API development.

I hope this is helpful!

Have you looked into IPFS? Sounds pretty similar of an effort.