private function addCors(Response &$response) { $response->setHeader('Access-Control-Allow-Origin', '*'); $response->setHeader('Access-Control-Expose-Headers', 'ETag, Content-Length'); }