Specifies which headers are allowed.
Specifies which methods are allowed. Can be GET, PUT, POST, DELETE or HEAD.
GET
PUT
POST
DELETE
HEAD
Specifies which origins are allowed.
Specifies expose header in the response.
Specifies time in seconds that browser can cache the response for a preflight request.