I didn’t send the request from developer portal. I integrated the swagger UI into my web application and use it to send the request from web. It’s similar to http://petstore.swagger.io/.
I also saw that the browsers added CORS header (origin header) into the request automatically.
Thanks,
Toan Do