It’s possible that Postman is a trusted domain by default for Azure, that may explain it. But localhost definitely needs a CORS settings on the server.
Here you have a video explaning how to set CORS in your Azure app.
Try this out and tell me if it works.