protected static final String ACCESS_CONTROL_ALLOW_METHODS = "Access-Control-Allow-Methods";

    /**
     * CORS header for allowing private network access.
     */
    protected static final String ACCESS_CONTROL_ALLOW_PRIVATE_NETWORK = "Access-Control-Allow-Private-Network";

    /**
     * CORS header for allowing credentials.
     */
    protected static final String ACCESS_CONTROL_ALLOW_CREDENTIALS = "Access-Control-Allow-Credentials";

        assertTrue("ACCESS_CONTROL_ALLOW_METHODS should be final", Modifier.isFinal(methodsField.getModifiers()));

        Field privateNetworkField = CorsHandler.class.getDeclaredField("ACCESS_CONTROL_ALLOW_PRIVATE_NETWORK");
        assertTrue("ACCESS_CONTROL_ALLOW_PRIVATE_NETWORK should be final", Modifier.isFinal(privateNetworkField.getModifiers()));

        Field credentialsField = CorsHandler.class.getDeclaredField("ACCESS_CONTROL_ALLOW_CREDENTIALS");