CorsHandler { public static void setAccessControlAllowCredentials(HttpServletResponse response) { response.setHeader(Headers.ACCESS_CONTROL_ALLOW_CREDENTIALS, "true"); }  void handle(HttpServletRequest request, HttpServletResponse response); static void allowOrigin(HttpServletRequest request, HttpServletResponse response); static void setAccessControlAllowCredentials(HttpServletResponse response); static final String ALLOWED_METHODS_STRING; }
@Test public void setAccessControlAllowCredentials() { CorsHandler.setAccessControlAllowCredentials(response); assertThat(response.getHeader("Access-Control-Allow-Credentials")).isEqualTo("true"); }