Trigger API from web page and encounter CORS error

Question

Hi, our API consumer encounters CORS error when triggering APIs hosted on Azure API management.
The consumer system is power app portal and triggers API from web page.
Here's the glance

From APIM side, we already enable related settings but with no luck.

Do you experts have any idea about what else could be done to pass this CORS check ?

Thank you very much

Answer 1

@Amy Z Your policy looks good and it seems that the browser is blocking the request not the API management gateway. Can you test the same request from the postman/fiddler and verify if it succeeded. If the request contains headers that are not allowed in the "allowed headers" list, CORS headers will not be returned. You don't have to allow all headers, you can add the ones that are being passed with requests that need to be allowed and see if it resolves the issue.