<?xml version="1.0" encoding="UTF-8"?>
<configuration>
    <system.webServer>
        <httpProtocol>
            <customHeaders>
                <add name="Access-Control-Allow-Headers" value="authorization, content-type, access-control-allow-credentials, origin" />
                <add name="Access-Control-Allow-Origin" value="*" />
                <add name="Vary" value="Origin" />
            </customHeaders>
        </httpProtocol>
    </system.webServer>
</configuration>
