Feature(http): Cors - support exposedHeaders option

2 files changed, 5 insertions, 0 deletions

diff --git a/service/http/config.go b/service/http/config.go
index 2897d1f7..e2f42626 100644
--- a/service/http/config.go
+++ b/service/http/config.go
@@ -50,6 +50,7 @@ type CORSMiddlewareConfig struct {
 	AllowedMethods string
 	AllowedHeaders string
 	AllowCredentials *bool
+	ExposedHeaders string
 	MaxAge int
 }
 
diff --git a/service/http/service.go b/service/http/service.go
index 527aca1b..f394f6af 100644
--- a/service/http/service.go
+++ b/service/http/service.go
@@ -315,6 +315,10 @@ func addCORSHeaders(w http.ResponseWriter, r *http.Request, options *CORSMiddlew
 		headers.Set("Access-Control-Allow-Headers", options.AllowedHeaders)
 	}
 
+	if options.ExposedHeaders != "" {
+		headers.Set("Access-Control-Expose-Headers", options.ExposedHeaders)
+	}
+
 	if options.AllowCredentials != nil {
 		headers.Set("Access-Control-Allow-Credentials", strconv.FormatBool(*options.AllowCredentials))
 	}