package org.col.dw.cors;

import org.hibernate.validator.constraints.NotEmpty;

public class CorsConfiguration {
  public static final String ANY_ORIGIN = "*";
  
  @NotEmpty
  public String origins = ANY_ORIGIN;
  
  @NotEmpty
  public String methods = "OPTIONS, GET, POST, PUT, DELETE";
  
  @NotEmpty
  public String headers = "Authorization";

  public boolean anyOrigin() {
    return ANY_ORIGIN.equals(origins);
  }
  
}
@@ -256,16 +256,22 @@
 OPTIONS,
+ HEAD,
  GET, PO
@@ -343,16 +343,30 @@
 rization
+, Content-Type
 %22;%0A%0A  pu

Add Content-Type to allowed default headers