services.AddCors(options =>

  {

      options.AddPolicy(name: "general",

          builder =>

          {

              builder.AllowAnyOrigin()

              .AllowAnyMethod().

              AllowAnyHeader();

          });

      options.AddPolicy(name: "restrictive",

          builder =>

          {

              builder.WithOrigins("http://Your frontEnd URL").

              WithMethods("GET", "POST", "PUT", "DELETE")

              .AllowAnyHeader();

          });

  });

app.UseCors("[general/restritive]; // or whatever name you use...