The set of headers to be allowed via CORS.
The methods to be allowed via CORS.
The set of origins to be allowed via CORS.
Are credentials allowed via CORS?
The max age to be allowed via CORS.