CORS was so annoying, I wrote an All-in-One post about it, so others won't spend as much, hopefully.

https://pellerex.com/blog/asp-net-5-cors