openstack-manuals/doc/config-reference/source/tables/common-cors.rst

Description of CORS configuration options

Configuration option = Default value	Description
[cors]
allow_credentials = True	(Boolean) Indicate that the actual request can include user credentials
allow_headers = Content-Type, Cache-Control, Content-Language, Expires, Last-Modified, Pragma	(List) Indicate which header field names may be used during the actual request.
allow_methods = GET, POST, PUT, DELETE, OPTIONS	(List) Indicate which methods can be used during the actual request.
allowed_origin = None	(List) Indicate whether this resource may be shared with the domain received in the requests "origin" header.
expose_headers = Content-Type, Cache-Control, Content-Language, Expires, Last-Modified, Pragma	(List) Indicate which headers are safe to expose to the API. Defaults to HTTP Simple Headers.
max_age = 3600	(Integer) Maximum cache age of CORS preflight requests.
[cors.subdomain]
allow_credentials = True	(Boolean) Indicate that the actual request can include user credentials
allow_headers = Content-Type, Cache-Control, Content-Language, Expires, Last-Modified, Pragma	(List) Indicate which header field names may be used during the actual request.
allow_methods = GET, POST, PUT, DELETE, OPTIONS	(List) Indicate which methods can be used during the actual request.
allowed_origin = None	(List) Indicate whether this resource may be shared with the domain received in the requests "origin" header.
expose_headers = Content-Type, Cache-Control, Content-Language, Expires, Last-Modified, Pragma	(List) Indicate which headers are safe to expose to the API. Defaults to HTTP Simple Headers.
max_age = 3600	(Integer) Maximum cache age of CORS preflight requests.