A list of headers that are allowed to be a part of the cross-origin request.
A list of HTTP methods that are allowed to be executed by the origin. Valid options are DELETE, GET, HEAD, MERGE, POST, OPTIONS, PUT or PATCH.
DELETE
GET
HEAD
MERGE
POST
OPTIONS
PUT
PATCH
A list of origin domains that will be allowed by CORS.
A list of response headers that are exposed to CORS clients.
The number of seconds the client should cache a preflight response.