Policy: CORS

Hi Eric, I just encountered a interesting scenario today with Swagger that I will like to make sure the apiman Gateway can support.

For Swagger UI to work on remote APIs, CORS has to be enabled on both the Swagger docs and the remote APIs.

https://github.com/swagger-api/swagger-ui/blob/master/README.md#cors-support

So when I use apiman, I want to register API endpoints via apiman, and then go thru the gateway to access the URL. This means the gateway has to support CORs.

I tested it on my own code today, I added a CORS filter to return the headers, with that, my REST API on a remote server can be called by Swagger from my laptop. Without that, it doesn't work.

So I am wondering the Gateway will have CORS built in or will be adding a policy to do it? Hope this is clear. Thx.