Symptoms When your front-end Blazor Client is not hosted by your back-end Web API you’ll likely hit a common problem: missing CORS headers. By default .NET Core Web API will not include any CORS headers. So, in the absence of headers, modern web browsers will enforce a default same origin policy. That is your Blazor client, on a different origin than your API, will not be allowed to make API requests.