// http header · cors header
Access-Control-Max-Age
How long a preflight result can be cached
What the Access-Control-Max-Age header does
Access-Control-Max-Age says how long (in seconds) the browser may cache a CORS preflight result, so repeated cross-origin requests don't each trigger an extra OPTIONS round trip.
Example
Access-Control-Max-Age: 600Where it's used
Access-Control-Max-Age is a cors header. CORS headers govern cross-origin requests — which other origins may read a response.