Solution 1:

With CORS, the values specified in AllowedHeaders and ExposedHeaders properties must match exactly with the headers sent and received respectively. A mismatch in these header values will cause CORS related errors.

Furthermore, in my experience different browsers send/receive different headers and that would also cause CORS related errors.

Simplest way to fix this is to set * for both AllowedHeaders and ExposedHeaders properties. What this will do is allow all headers and you will not get CORS error.