title: Azure API Management : Origin header was missing or empty and the request was classified as not cross-domain. CORS policy was not applied
body: <p>I am working with Azure API Management and have three API's that I need to manage with it.  When testing, the GET methods work fine, however the post methods I get the following error:</p>
  
  <blockquote>
    <p>Origin header was missing or empty and the request was classified as not cross-domain. CORS policy was not applied.</p>
  </blockquote>
  
  <p>I have searched around and seen a number of issues with CORS and APIM, however I havent seen my specific issue as of yet. </p>
  
  <p>The current configuration of the CORS Policy is </p>
  
  <pre><code>&lt;policies&gt;
  &lt;inbound&gt;
      &lt;cors&gt;
          &lt;allowed-origins&gt;
              &lt;origin&gt;*&lt;/origin&gt;
          &lt;/allowed-origins&gt;
          &lt;allowed-methods&gt;
              &lt;method&gt;GET&lt;/method&gt;
              &lt;method&gt;POST&lt;/method&gt;
          &lt;/allowed-methods&gt;
      &lt;/cors&gt;
  &lt;/inbound&gt;
  &lt;backend&gt;
      &lt;forward-request /&gt;
  &lt;/backend&gt;
  &lt;outbound /&gt;
  &lt;on-error /&gt;
  &lt;/policies&gt;
  </code></pre>
  
  <p>I have looked for answers in the following places :</p>
  
  <p><a href="https://docs.microsoft.com/en-us/azure/api-management/api-management-cross-domain-policies" rel="noreferrer">https://docs.microsoft.com/en-us/azure/api-management/api-management-cross-domain-policies</a></p>
  
  <p><a href="https://stackoverflow.com/questions/42494925/azure-api-management-cors-why-do-i-get-headers-starting-with-access-control">Azure API Management CORS: Why do I get &quot;Headers starting with &#39;Access-Control-&#39; were removed...&quot;</a></p>
  
  <p><a href="https://briancaos.wordpress.com/2018/04/05/azure-api-management-configure-cors-in-the-policy/" rel="noreferrer">https://briancaos.wordpress.com/2018/04/05/azure-api-management-configure-cors-in-the-policy/</a></p>
  
  <p>The questions I have are
  1. How do I need to shape my CORS policy, 
  2. Do I need to add anything in to the API Startup.cs or config files to handle CORS too?</p>
  
  <p>Thanks?</p>