No 'Access-Control-Allow-Origin' header with Microsoft Online Auth
<p>I am trying to make a simple request to get an access token using the Microsoft graph OAuth endpoint. When I send the simple request below I get </p>

<blockquote>
  <p>No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'localhost:8080/myapprunninglocally' is therefore not allowed access.**"</p>
</blockquote>

<pre><code>var xhttp = new XMLHttpRequest();
xhttp.open("GET", "https://login.microsoftonline.com/common/oauth2/authorize?client_id=&lt;client_id&gt;&amp;scope=wl.signin%20wl.calendars_update&amp;response_type=token&amp;redirect_uri=localhost:8080/myapprunninglocally", true);
xhttp.send();
</code></pre>

<p>I have also registered this app using Microsoft Azure Directory, requested ALL permissions, and used the delegated <code>client_id</code>. </p>

<p>I have read up on CORS and I am aware Cross-Origin Policies however, I'm aware there are APIs which expose endpoints that include the <code>'Access-Control-Allow-Origin'</code> in their response headers. Is anyone able to help? </p>