OptionalallowedOptionalcredentialsOptionalexposedOptionalmaxOptionalmethodsOptionaloptionsOptionaloriginConfigures the Access-Control-Allow-Origin CORS header.
We recommend setting a specific value rather than
true to avoid exposing the source code to untrusted origins.
Optionalpreflight
https://github.com/expressjs/cors#configuration-options