I have implemented this. you can host some code files on a separate server and instead of making API calls directly from Shopify, call your hosted code which can internally call the APIs to avoid the CORS issue, and then return the result back to Shopify.
Or
you can do something like https://cors-anywhere.herokuapp.com/api-url to avoid cors error, but this has a throttle limit of 200 hits/hour.