add cors configuration

[stefanovualto]

Example:

this.express.use(
    (req: express.Request, res: express.Response, next: express.NextFunction) => {
        res.header("Access-Control-Allow-Methods", "GET, POST, OPTIONS");
        res.header(
            "Access-Control-Allow-Headers",
            "Origin, X-Requested-With, Content-Type, Accept, Authorization, Access-Control-Allow-Credentials"
        );
        res.header("Access-Control-Allow-Credentials", "true");
        next();
     }
);

this.express.use(cors());

[somerobmitchell]

I like this idea but should it be more dynamic?

We have a set list of headers that we can set but only allow them if asked for by the client:
https://developer.mozilla.org/en-US/docs/Glossary/Preflight_request

[stefanovualto]

What do you mean by dynamic, something like use env variables?