{ "allow-credentials": true, "allow-headers": "string", "allow-methods": "string", "allow-origin": "string", "expose-headers": "string" }