I'm calling Azure durable function management API from my client-side code. Since it's a CORS request, the code won't let me see any relevant headers (I need the continuation token because I need to get more than one page of log records). CORS is enabled in Azure and Access-Control-Allow-Credentials is set to true, I use withCredentials on the client side, but I still can't get any relevant headers. I wonder what I am doing wrong here.
Is there any chance to do it on the client, or should I use a server-side proxy?