How does CORS works?

• CORS enables the server to expressly whitelist particular origins, allowing the server to get around the same-origin policy. Each response will have an additional header labelled "Access-Control-Allow-Origin" if your server is configured for CORS

Cross Origin Resource Sharing, or CORS. By adding a few headers to HTTP responses, you can specify (on your server) what other servers are allowed access to. This allows you to provide your back-end API from a different server than where you serve your front-end app without compromising security