title: No 'Access-Control-Allow-Origin' header with Microsoft Online Auth
body: <p>I am trying to make a simple request to get an access token using the Microsoft graph OAuth endpoint. When I send the simple request below I get </p>
  
  <blockquote>
    <p>No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'localhost:8080/myapprunninglocally' is therefore not allowed access.**"</p>
  </blockquote>
  
  <pre><code>var xhttp = new XMLHttpRequest();
  xhttp.open("GET", "https://login.microsoftonline.com/common/oauth2/authorize?client_id=&lt;client_id&gt;&amp;scope=wl.signin%20wl.calendars_update&amp;response_type=token&amp;redirect_uri=localhost:8080/myapprunninglocally", true);
  xhttp.send();
  </code></pre>
  
  <p>I have also registered this app using Microsoft Azure Directory, requested ALL permissions, and used the delegated <code>client_id</code>. </p>
  
  <p>I have read up on CORS and I am aware Cross-Origin Policies however, I'm aware there are APIs which expose endpoints that include the <code>'Access-Control-Allow-Origin'</code> in their response headers. Is anyone able to help? </p>