Cors and Implicit flow

Questions
1

Is it mandatory to enable CORS on the account to implement implicit flow for a SPA?
or
Is there any way to achieve this without enabling CORS?