allowedHeaders configuration doesn't change

[Emanuel-Palestino]

Hi, I changed the cors config file in LEAF API with the following:

'methods' => 'GET,PUT,POST,DELETE,OPTIONS',
'allowedHeaders' => 'Content-Type,Authorization',
'credentials' => true,

/* ... Other default configuration */

But the Access-Control-Allow-Headers header in preflight request doesn't change, it always has '*' value (default configuration).

This is the response headers:

I'm changing the default configuration for use cookies, I don't know if there is other way.

I hope you can help me, thanks.

[mychidarko]

I'll check on this issue @Emanuel-Palestino