Configuration

configobject
Hide Child Parameters
allow_origin_absentboolean

A boolean value that skip cors response headers when origin header of request is empty

Default:true

credentialsboolean

Flag to determine whether the Access-Control-Allow-Credentials header should be sent with true as the value.

Default:false

exposed_headersarray[string]

Value for the Access-Control-Expose-Headers header. If not specified, no custom headers are exposed.

headersarray[string]

Value for the Access-Control-Allow-Headers header.

max_agenumber

Indicates how long the results of the preflight request can be cached, in seconds.

methodsarray[string]

‘Value for the Access-Control-Allow-Methods header. Available options include GET, HEAD, PUT, PATCH, POST, DELETE, OPTIONS, TRACE, CONNECT. By default, all options are allowed.’

Allowed values:CONNECTDELETEGETHEADOPTIONSPATCHPOSTPUTTRACE

Default:CONNECT, DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT, TRACE

originsarray[string]

List of allowed domains for the Access-Control-Allow-Origin header. If you want to allow all origins, add * as a single value to this configuration field. The accepted values can either be flat strings or PCRE regexes.

preflight_continueboolean

A boolean value that instructs the plugin to proxy the OPTIONS preflight request to the Upstream service.

Default:false

private_networkboolean

Flag to determine whether the Access-Control-Allow-Private-Network header should be sent with true as the value.

Default:false

protocolsarray[string]

A set of strings representing HTTP protocols.

Allowed values:grpcgrpcshttphttps

Default:grpc, grpcs, http, https

>= 1 characters

routeobject

If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.

* Additional properties are NOT allowed.
Hide Child Parameters
idstring
serviceobject

If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.

* Additional properties are NOT allowed.
Hide Child Parameters
idstring

Did this doc help?

Something wrong?

Help us make these docs great!

Kong Developer docs are open source. If you find these useful and want to make them better, contribute today!