Missing header Access-Control-Allow-Origin

Request to login.microsoftonline.com getting blocked at browser because of missing header Access-Control-Allow-Origin in the OPTION request before the actual request.

Grafana is the application which got added a Prometheus datasource. Prometheus is authenticated using oauth2-proxy and Microsoft AD. Prometheus alone works very well in browser ie, successfully getting authenticated.