Default Substitution Variables for the CORS Implementation

Name Type Description Resolved Value
cors.allowedOrigins String The origins allowed for cross origin requests *
cors.allowedMethods String HTTP Methods allowed for cross domain request GET,POST,PUT,DELETE,HEAD,OPTIONS
cors.allowedHeaders String HTTP Headers allowed for cross domain requests content-type,authorization
cors.preflightMaxAge Integer Max age in milliseconds for cross domain requests 1800
cors.allowCredentials String Credentials allowed for cross domain requests true
cors.contextRoot String Context root(s) on which CORS is enabled, comma separated /bpm/*,/apps/*
httpConnector String The name of the http connector to use httpConnector