Specifies which headers are allowed.
Specifies which methods are allowed. Can be GET, PUT, POST, DELETE or HEAD.
Specifies which origins are allowed.
Specifies expose header in the response.
Specifies time in seconds that browser can cache the response for a preflight request.