CORS Configuration does not apply for 304 refresh requests about unleash-proxy HOT 4 CLOSED

❯ curl -I --location --request GET 'http://localhost:3000/proxy?userId=99' \
-H 'Origin: http://example.com' \
-H 'Authorization: some-secret'
HTTP/1.1 200 OK
Access-Control-Allow-Origin: http://example.com
Vary: Origin, Accept-Encoding
Cache-control: public, max-age=2
Content-Type: application/json; charset=utf-8
Content-Length: 9299
ETag: W/"2453-1yoqHWPP3DU/zVKAUXQQ02ygZQ0"
Date: Fri, 15 Jul 2022 11:50:48 GMT
Connection: keep-alive
Keep-Alive: timeout=5

❯ curl -I --location --request GET 'http://localhost:3000/proxy?userId=99' \
-H 'Origin: http://example.com' \
-H 'Authorization: some-secret' \
-H 'if-none-match: W/"2453-1yoqHWPP3DU/zVKAUXQQ02ygZQ0"'
HTTP/1.1 304 Not Modified
Access-Control-Allow-Origin: http://example.com
Vary: Origin
Cache-control: public, max-age=2
ETag: W/"2453-1yoqHWPP3DU/zVKAUXQQ02ygZQ0"
Date: Fri, 15 Jul 2022 11:50:52 GMT
Connection: keep-alive
Keep-Alive: timeout=5

    cors: {
        origin: 'http://example.com',
    }

➜  ~ curl --location --request GET 'https://redacted/proxy?userId=myUser2' -i \
--header 'Origin: http://example.com' \
--header 'Authorization: redacted'
HTTP/2 200 
access-control-allow-origin: http://localhost:3001
cache-control: public, max-age=2
content-type: application/json; charset=utf-8
etag: W/"87-/cEiJdy7BgvCABHt6xVgsypDIcs"
via: 1.1 spaces-router (b642bf20b975), 1.1 varnish
accept-ranges: bytes
date: Fri, 15 Jul 2022 15:41:36 GMT
age: 0
x-served-by: cache-pao17421-PAO
x-cache: MISS
x-cache-hits: 0
x-timer: S1657899697.549769,VS0,VE256
vary: Origin, Accept-Encoding
content-length: 135

➜  ~ curl --location --request GET 'https://redacted/proxy?userId=myUser2' -i \
--header 'Origin: http://example.com' \
--header 'Authorization: redacted' \
--header 'if-none-match: W/"87-/cEiJdy7BgvCABHt6xVgsypDIcs"'
HTTP/2 304 
date: Fri, 15 Jul 2022 15:44:40 GMT
via: 1.1 varnish
cache-control: public, max-age=2
etag: W/"87-/cEiJdy7BgvCABHt6xVgsypDIcs"
age: 0
x-served-by: cache-sjc10020-SJC
x-cache: MISS
x-cache-hits: 0
x-timer: S1657899880.429934,VS0,VE191
vary: Origin, Accept-Encoding