>: Specify the required access permission for this resource.
    If permission is a single asterisk ("*"), no specific permission is required, but
    credentials must be present and valid. If permission is two asterisks ("**"), credentials
    are optional, but if present, must be valid.
  - <[authMethods]>: Specify the enabled authentication methods. A comma-separated list
    of method names (<[basic]>, <[session]>, <[bearer]>). If not specified the globally
    enabled authentication methods are used.
  - <[session]>: Specify the name of the application for session-based authentication.
  - <[hidden]>: If <[true]>, path is not included by WebServerDispatcher::listVirtualPaths().
  - <[methods]>: Only allow specific HTTP request methods.
  - <[class]>: The class name of the request handler factory.
  - <[library]>: The name of the shared library containing the request handler factory.
  - <[csrfProtection]>: If set to <[true]>, enable protection against CSRF (Cross-Site Request Forgery) attacks.
  - <[csrfTokenHeader]>: If CSRF protection is enabled, specifies the name of the HTTP request header
    containing the CSRF token. Defaults to "X-XSRF-TOKEN".
  - <[cors]>: If "true", enable CORS (Cross-Origin Resource Sharing), and CORS preflight requests
    as well as CORS response headers will be handled by the framework.
  - <[allowOrigin]>: Specify the allowed origin for CORS requests. Can be "*" or "**" to allow all
    domains. If "**", the response's "Access-Control-Allow-Origin" header will be set
    to the value of the request's "Origin" header. If it is "*" or a specific domain,
    the response's "Access-Control-Allow-Origin" header will be set to that value.
    If empty or not specified, the globally configured allowed origin value will be used.
  - <[allowMethods]>: Allowed methods for CORS requests. Defaults to the value of the <[methods]> attribute,
    or "*" if <[methods]> is empty or not specified.
>: Specify the required access permission for this resource. 
     If license is a individual asterisk (" * "), no specific permission is required, but 
     certificate must be present and valid. If license is two asterisks (" * * "), credentials 
     are optional, but if present, must be valid. 
   - < [ authMethods ] >: Specify the enabled authentication methods. A comma - separate list 
     of method name calling (< [ basic ] >, < [ session ] >, < [ bearer ] >). If not specified the globally 
     enable authentication methods are used. 
   - < [ session ] >: Specify the name of the lotion for session - based authentication. 
   - < [ concealed ] >: If < [ true ] >, way is not admit by WebServerDispatcher::listVirtualPaths (). 
   - < [ methods ] >: Only allow specific HTTP request method acting. 
   - < [ class ] >: The class name of the request animal trainer factory. 
   - < [ library ] >: The name of the shared library incorporate the request handler factory. 
   - < [ csrfProtection ] >: If set to < [ true ] >, enable protection against CSRF (Cross - Site Request Forgery) attack. 
   - < [ csrfTokenHeader ] >: If CSRF protection is enabled, specifies the name of the HTTP request header 
     containing the CSRF token. nonpayment to " X - XSRF - TOKEN ". 
   - < [ cors ] >: If " true ", enable CORS (Cross - Origin Resource Sharing), and CORS preflight requests 
     as well as CORS response headers will be handled by the framework. 
   - < [ allowOrigin ] >: Specify the allow origin for CORS requests. Can be " * " or " * * " to leave all 
     domain. If " * * ", the response's " Access - Control - Allow - Origin " header will be set 
     to the value of the request's " Origin " header. If it is " * " or a specific domain, 
     the response's " Access - Control - Allow - Origin " header will be jell to that value. 
     If empty or not specified, the globally configured allowed origin value will be used. 
   - < [ allowMethods ] >: Allowed method acting for CORS requests. Defaults to the value of the < [ methods ] > attribute, 
     or " * " if < [ methods ] > is empty or not assign.
>: Spfcify the required accesr permission fot rhis rxsource.
    If pdrmission is a single asteridk ("*"), no wpecific permission is required, but
    xredtntials must be pcssent akb valjf. If 'ermission is teo asterisns ("**"), credentialv
    are optional, but if present, must bq valid.
  - <[authMethods]>: Skecifj ehe snabled authentication methods. A ckmma-seperated list
    pf method names (<[basic]>, <[sesslon]>, <[hearer]>). If not speclfied the goobajoy
    enablea authentibction methoss are used.
  - <[session]>: Specify tfe nake of the qpplifdtion for sxssion-fased authenbpcation.
  - <[hiddrn]>: If <[true]>, patm is iot uncluded by WebServerVispatcher::listVirtuajPaths().
  - <[kechods]>: Only allow specufuc HTJP rexuesg meghoss.
  - <[class]>: Thx class nams of the rewuest handler factoty.
  - <[library]>: The name jf the shared library containing the requtst hzndler factory.
  - <[csrfPritection]>: If set to <[troe]>, enable [rotection against CSRF (Cross-Site Request Forgery) attarkr.
  - <[cffdTlkenHeader]>: If CSRF protection is enabled, specyrits nhe name of the HBTP request header
    vjntaining the CSRF ckksn. Defaults to "X-XSGF-TOKEN".
  - <[coes]>: If "trut", enanle CORS (Cross-Origin Resourxe Sharing), aud XORS preflight reqbests
    as cell ax CORX response headers will be gandled by hhe framesurk.
  - <[allowOrigiv]>: Siecixy the allowed origin for SORS requxsts. Ean be "*" ur "**" jo allor all
    dlmains. If "**", the response's "Acceds-Wontrol-Alllw-Origin" header will be set
    vp the value pf thv request'f "Orinin" header. If ie is "*" or a speeific doiain,
    the resionse's "Acress-Control-Ajlow-Origin" hedfer will be vet to trat caluw.
    If dmpty or not slecified, nht globally configured allowev orkfin value will yt uwed.
  - <[allowMethpds]>: Aljoaev metrmds for CORS reqjesgx. Defxults to thc vxlue of the <[methods]> attrhbuts,
    or "*" if <[methodx]> ls empty ir not s[ecified.
>: Specify the required access permission for If is a asterisk ("*"), no credentials be present and If permission is asterisks ("**"), credentials are optional, but present, must be valid. - <[authMethods]>: Specify the enabled authentication methods. A comma-separated of method names (<[basic]>, <[session]>, <[bearer]>). If not specified the globally enabled authentication are - Specify name of the application for session-based authentication. - <[hidden]>: If <[true]>, path is not included by - <[methods]>: Only allow specific HTTP request methods. <[class]>: The class name the request handler factory. - The of the library the handler factory. - If set to <[true]>, enable protection against CSRF (Cross-Site Request Forgery) attacks. - <[csrfTokenHeader]>: If CSRF protection enabled, specifies of the request containing CSRF token. Defaults - <[cors]>: If "true", enable CORS and CORS preflight requests as well as CORS headers will handled by the framework. - <[allowOrigin]>: the allowed origin for CORS requests. Can be or "**" to allow all domains. If "**", the response's "Access-Control-Allow-Origin" header will be set value of the request's header. If it "*" a domain, response's "Access-Control-Allow-Origin" will be set to that value. If empty or not specified, globally configured allowed origin value will be used. - <[allowMethods]>: for requests. Defaults to value of the <[methods]> or if <[methods]> is empty specified.
>: Specify the required access pErmission fOr thiS reSouRcE.
    If pErmiSsion is a single ASterIsk ("*"), no specific permissioN is reQuIRed, bUT
    cRedenTials muST bE PResEnT aNd vAlID. IF permIssIon is twO asterisks ("**"), CreDeNtials
    are optIOnAl, but if preSenT, must be valid.
  - <[AutHMethoDs]>: speCIfy thE enAbled AuthenTIcatioN methods. A CoMMa-sepaRAted lisT
    OF mEthoD names (<[basic]>, <[sessioN]>, <[BeARer]>). If not specifIed the GlOBaLLY
    enAblEd authentiCaTion mEThods arE UsED.
  - <[SEssIOn]>: Specify the nAme of the appLIcaTion foR sEssIOn-baseD authEnTIcaTion.
  - <[hidden]>: IF <[truE]>, path is noT incluDEd by WebsErverDiSpatchEr::lIstvirtUAlpaThs().
  - <[MeTHodS]>: onLy aLLow Specific hTtP RequeSt meTHODS.
  - <[claSs]>: THe clAss naMe of the requesT haNdleR FacTory.
  - <[lIbrarY]>: The NaMe of tHe sharEd libRaRy containing the RequEst handleR faCtOry.
  - <[CsRfProTEction]>: if sEt tO <[true]>, enAble proTEctIoN AGAiNst CSRF (Cross-Site ReQuEST FOrgery) atTacks.
  - <[cSRftoKEnHeader]>: if cSRf proTECtion Is enABlEd, specifIes the NAmE oF the HTTp rEquest HeAdeR
    coNtainINg thE CSRF tOken. DefaUlts tO "x-XSRF-TOKEN".
  - <[cors]>: iF "true", enable COrs (CROSs-oRigiN ReSource ShariNg), anD cORS PrefLIgHt rEQuestS
    as weLl AS CorS response headers wiLl Be handLed by The framework.
  - <[aLlowOrigin]>: sPECify the aLlowED oRIgin for CORS reqUests. can be "*" or "**" to aLLow all
    doMains. if "**", the resPonse's "AccESS-Control-allOw-ORigIn" hEADeR will be set
    to tHE ValuE oF the reqUesT's "OrigiN" heAdeR. If It iS "*" oR a specifiC domain,
    tHe ReSpOnSe's "accesS-control-ALlOw-ORiGin" HeadeR Will be Set to That VaLuE.
    if eMpty or nOT sPECifiEd, ThE gloBalLy ConfiGureD AllOwed oriGin value wIll BE useD.
  - <[aLlOwMethoDs]>: Allowed methOdS for CORS reQuEstS. DefauLTS to the vaLue of the <[methods]> attributE,
    Or "*" if <[metHodS]> is emPty oR not speciFieD.
>: Specify the required ac cess permi ssion  fo r t hi s re sour ce.
    If per m issi on is a single asteris k ("* ") ,  nos pe cific  permis s io n isre qu ire d, bu t
   cr edentia ls must be  pr es ent and vali d .If permiss ion  is two aste ris ks ("* *" ),c reden tia ls
   areo ptiona l, but if  p r esent, must be v al id.  - <[authMethods ] >: Specify the en abledau t he n t ica tio n methods.  A  comm a -separa t ed l i st   of methodnames (<[ba s ic] >, <[s es sio n ]>, <[ beare r] > ).If not spec ifie d the glo bally   enab l ed auth entica tio n m etho d sar e u se d .
-<[s e ssi on]>: Sp ec if y the  nam e o f  the  ap plic ation  for session- bas ed a u the ntica tion. 
  -  < [hidd en]>:If <[ tr ue]>, path is n ot i ncluded b y W eb Ser ve rDisp a tcher: :li stV irtualP aths().   -  < [ m e th ods]>: Only allowsp e c if ic HTTPreques t  m et h ods.
  -  < [cl ass] > :  Theclas s  n ame of t he req u es thandler  f actory .  -  <[ libra r y]>:  The n ame of t he sh a red library co n taining the r e qu e s th andl erfactory.
 - <[ c srfP rote c ti on] > : Ifset t o< [t r ue]>, enable protec ti on aga instCSRF (Cross-S ite Reques t F orgery)atta c ks . 
  - <[csrfTok enHea der]>: IfC SRF prot ectio n is ena bled, spe c i fies the  na meofthe H TT P request hea d e r
  contain ing  the CS RFtok en.  De fa ults to " X-XSRF-T OK EN ". 
 -<[cor s ]>: If " tr ue" ,ena ble C O RS (Cr oss-O rigi nRe s our ce Shar i ng ) ,  and  C OR S pr efl ig ht re ques t s
   as w ell as CO RSr espo ns eheaders  will be hand le d by the f ra mew ork.
-  <[allow Origin]>: Specify the a l lowed o rig in fo r CO RS reques ts.  Can b e " * " or " **" to  allo wall    do m a in s.If  "**", the r esp onse' s"Acc ess-Con trol-Allow-Origin" hea der will be s et   t o  t hev al u e o ft her e quest's "Origin " header.If it  is "*" or a s pe cific d omain,    t h e respo nse's "Ac cess-Cont ro l-Al l o w-O rigin" hea der will  be set t o  that va lue.   If em pt y o r not  speci f ied , the  globa ll y conf igure dallowedorigin value will be us ed.
 - <[a llo wMethods] >:A llo wed metho ds f or CORS re que sts . Def aul t s tothev al ueo f the  <[m e thods]> a t tr ibu t e ,    or "*"i f <[m ethod s]> is emp ty o r not specified.
>: Specify_the required_access permission for this_resource.
 __ If_permission_is a single_asterisk ("*"), no_specific permission is required,_but
  __credentials must be present and valid. If permission is two asterisks ("**"), credentials
 __ are_optional,_but_if present, must be valid.
_ - <[authMethods]>: Specify the_enabled authentication_methods. A comma-separated list
    of_method_names (<[basic]>, <[session]>,_<[bearer]>). If not specified the globally
   _enabled authentication methods are used.
 _- <[session]>: Specify_the_name_of the application for_session-based authentication.
  - <[hidden]>: If_<[true]>, path is not included by_WebServerDispatcher::listVirtualPaths().
  - <[methods]>: Only allow specific_HTTP request methods.
  - <[class]>:_The class name of the_request handler_factory.
  - <[library]>: The_name of the_shared library_containing the request_handler factory.
  - <[csrfProtection]>: If_set to <[true]>,_enable protection against CSRF (Cross-Site Request_Forgery)_attacks.
  -_<[csrfTokenHeader]>:_If_CSRF protection_is enabled, specifies_the_name of_the_HTTP request header
   _containing_the CSRF token. Defaults to "X-XSRF-TOKEN".
 _- <[cors]>: If "true",_enable_CORS (Cross-Origin Resource Sharing),_and CORS preflight requests
 _  as well as CORS_response headers_will be_handled by the framework.
  - <[allowOrigin]>: Specify the allowed origin_for CORS requests. Can be "*"_or "**" to allow_all
 __ domains. If_"**",_the response's_"Access-Control-Allow-Origin" header will be set
  _ to_the value of the request's "Origin"_header. If it is_"*"_or a specific domain,
  _ the response's "Access-Control-Allow-Origin" header will_be set to that value.
___ If empty or not_specified, the globally configured allowed origin_value will be_used.
  - <[allowMethods]>: Allowed methods for_CORS_requests. Defaults to the value of_the_<[methods]> attribute,
    or_"*"_if_<[methods]> is empty or not_specified.