feat: read CORS_ALLOWED_HEADERS & CORS_ALLOWED_METHODS from the env

cmd/tank/config.go

@@ -47,6 +47,14 @@ func (c *CorsConfig) ExpandEnv() {
 		c.AllowCredentials = true
 	}
 
+	if allowedHeaders, exists := os.LookupEnv("CORS_ALLOWED_HEADERS"); exists {
+		c.AllowedHeaders = strings.Split(allowedHeaders, ",")
+	}
+
+	if allowedMethods, exists := os.LookupEnv("CORS_ALLOWED_METHODS"); exists {
+		c.AllowedMethods = strings.Split(allowedMethods, ",")
+	}
+
 	if allowedOrigins, exists := os.LookupEnv("CORS_ALLOWED_ORIGINS"); exists {
 		c.AllowedOrigins = strings.Split(allowedOrigins, ",")
 	}