A allowed_origins block as defined above.
allowed_origins
Whether CORS requests with credentials are allowed.