OptionalallowedAllowed headers in requests.
OptionalcredentialsWhether to allow credentials.
OptionalexposedHeaders exposed to the client.
OptionalmaxMax age for preflight cache (in seconds).
OptionalmethodsAllowed HTTP methods.
OptionaloriginAllowed origins for CORS requests. Can be a string, array of strings, or '*' for all origins.
CORS configuration options