tnb.server/apihost/Tnb.API.Entry/Configurations/Cors.json

{
  "CorsAccessorSettings": {
    "PolicyName": "JNPFCorsAccessor",
    //"WithOrigins": [  "http://localhost:9230" ],
    "WithExposedHeaders": [ "access-token", "x-access-token", "Content-Disposition" ]
  }
}