{ "session": { "key": "myApp", "secretKeys": [ "mySecretKey1" ], "maxAge": 86400000 }, "csrf": false, "csp": false, "p3p": false, "hsts": { "maxAge": 31536000, "includeSubDomains": true }, "xframe": "SAMEORIGIN", "xssProtection": false, "cors": { "origin": "http://studio.strapi.io", "expose": [ "WWW-Authenticate", "Server-Authorization" ], "maxAge": 31536000, "credentials": true, "methods": [ "GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS", "HEAD" ], "headers": [ "Content-Type", "Authorization", "StudioToken" ] }, "ssl": false, "ip": { "whiteList": [], "blackList": [] }, "proxy": false }