The AccountController also needs to enable CORS. Steps: Copy the EnableCorsAttribute line from above the class declaration of the ProductsController. Paste the EnableCorsAttribute line above the class declaration for the AccountController.