Add configurable Access-Control-Max-Age header to CORS policy

[GeroldSchierholz]

CORS policy is a great and easy to use policy to enable CORS requests. It would be even better, if also browser caching of the CORS response would be enabled / configurable. Therefore the standard header 'Access-Control-Max-Age' should be available in CORS policy.

Version

all / latest

Steps To Reproduce

Configure api. Add CORS Policy. CURL with method OPTIONS.

Current Result

Only the following headers are set:

Access-Control-Allow-Headers
Access-Control-Allow-Methods
Access-Control-Allow-Origin
Access-Control-Allow-Credentials

Max Age is missing and would help to avoid unnecessary OPTIONS calls before every request.

Expected Result

Add a configurable (maybe default 600) Access-Control-Max-Age Header to CORS Response

[GeroldSchierholz]

Thx for the fast implementation. Looking forward to test it when released.