HapiJS CORS Handler For 'DELETE'

hapijs-options-header.js

if (request.method === 'options') {
    let response = request.response.isBoom ? request.response.output : request.response;
    response.statusCode = 200;
    response.headers['access-control-expose-headers'] = 'content-type, content-length, etag';
    response.headers['access-control-max-age'] = 60 * 10; // might be not needed
    
    // dynamically set allowed headers & method (this is the important part)
    if (request.headers['access-control-request-headers']) {
      response.headers['access-control-allow-headers'] = request.headers['access-control-request-headers']
    }
    if (request.headers['access-control-request-method']) {
      response.headers['access-control-allow-methods'] = request.headers['access-control-request-method'];
    }
  }