CORS middleware with full W3C spec support.
var corsMiddleware = require('restify-cors-middleware');
var cors = corsMiddleware({
preflightMaxAge: 5, //Optional
origins: ['http:https://api.myapp.com', 'http:https://web.myapp.com'],
allowHeaders: ['API-Token'],
exposeHeaders: ['API-Token-Expiry']
});
server.pre(cors.preflight);
server.use(cors.actual);See unit tests for examples of preflight and actual requests.