ASP.NET Core CORS WebAPI: no Access-Control-Allow-Origin header

Question

I have deployed my ASP.NET Core web API to Azure, and I can access its endpoints using Swagger or a web debugger like Fiddler. In both cases (same origin in Swagger, different o