Web API is using app.UseHttpsRedirection(); which cause CORS issue if requesting client is not https based. So in order to use it with http client we need to comment or remove that line.
This issue is not with CORS, the https is causing this issue but thrown error is saying its with CORS.