def METHOD_NAME(server, allowed, origin, expected):
    Setting().set(SettingKey.CORS_ALLOW_ORIGIN, allowed)
    resp = server.request('/user/me', method='GET', additionalHeaders=[('Origin', origin)])
    assert resp.headers.get('Access-Control-Allow-Origin') == expected