configuring CORS in Oqtane

[artmedia]

Hello,
I'm trying to provide access to an API from an external website.
The API is built within my 'server' Oqtane project.
Here’s what I did:

1. in the header of my controller I enabled CORS:
   [Microsoft.AspNetCore.Cors.EnableCors("myCORSPolicy")]
   [HttpGet("ListAllEntities")]
   public async Task<List> ListAllEntities()
   {...}

2. in StartUpServer.cs (in the Repository folder) I added these rows
   public void ConfigureServices(IServiceCollection services)
   {
   services.AddCors(options =>
   {
   options.AddPolicy("myCORSPolicy",policy =>
   {
   policy.AllowAnyHeader().AllowAnyMethod().AllowAnyHeader().AllowCredentials();
   });
   });
   }
   public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
   {
   app.UseCors("myCORSPolicy");
   }

After these settings the external client still get error message "Access to XMLHttpRequest ... from origin ... has been blocked by CORS policy"

Is this correct or there's something missing?
thanks in advance

[artmedia]

solved

• installed microsoft.aspnetcore.cors
• corrected a typo:
  "policy.AllowAnyHeader().AllowAnyMethod().AllowAnyHeader().AllowCredentials();"
  to "policy.AllowAnyOrigin().AllowAnyMethod().AllowAnyHeader();"