Middleware: WithCorsConfig

Per-instance configuration for withCors.

Parameters

• origin

  (Optional)

  Allowed origin(s). A literal `'*'`, an exact origin string, a list of origins, or a predicate over the request's `Origin`. Defaults to `'*'`. `'*'` cannot be combined with `credentials: true` (the Fetch spec forbids it); when both are set, the request's `Origin` is reflected instead.

• methods

  (Optional)

  Methods advertised on preflight.

• allowedHeaders

  (Optional)

  Headers advertised on preflight. When omitted, the request's `Access-Control-Request-Headers` is reflected.

• exposedHeaders

  (Optional)

  Response headers exposed to the client beyond the safelist.

• credentials

  (Optional)

  Send `Access-Control-Allow-Credentials: true`.

• maxAge

  (Optional)

  `Access-Control-Max-Age` (seconds) for preflight caching.

• optionsSuccessStatus

  (Optional)

  Status for a successful preflight.