Blog

Azure Functions: CORS in the portal, host.json overrides, and function keys versus Easy Auth

Portal CORS settings apply to the function app host—local Azurite and production may diverge if not synced in IaC.

1 min read
azurefunctionscors

Consumption plan

Cold starts affect preflight latency—use Application Insights to split CORS errors from cold timeouts.

Scale controller decisions are opaque—correlate with regional capacity during incidents.

Durable Functions

Orchestration status endpoints are HTTP too—apply the same CORS policy as activity triggers.

External events may arrive from webhooks—document which origins are allowed for human operators.

Back to blog