API calls blocked by CORS even with Access-Control-Allow-Origin : * present in headers

Question

API calls from react site keep getting blocked by CORS even tho both the react app and the api are served with Access-Control-Allow-Origin : * header along with