- Inspector: https://httptoolkit.tech/
- https://www.moesif.com/blog/technical/cors/Authoritative-Guide-to-CORS-Cross-Origin-Resource-Sharing-for-REST-APIs/#
- Chrome dev tools do not show OPTIONS requests anymore: https://dev.to/pimterry/chrome-79-no-longer-shows-preflight-cors-requests-4k7e
- Postman sends the
Cache-Control: no-cache
header by default, and needs to be disabled in the settings - 304 responses by express do not include the body, but it’s shown anyway in the Chrome Dev Tools
- Chrome dev tools do not show headers sent because of the Site Isolation feature added in Chrome 67