What is CORS, why might it be blocked, and what is a preflight request?

Restaurant A (your website) wants to fetch items from the inventory of restaurant B (another origin API). The browser's security guard blocks the request: "Does B allow A to fetch items?" For this unusual request, the guard sends a preflight OPTIONS request; only when B signs off (Allow header) will the request be permitted.