oidcDropCspHeaders shouldn't drop CORS headers
When using this option, if relying party is inside web app, Chromium refuse to download OIDC metadata because of lack of CORS headers
Fixed by !432 (merged)
When using this option, if relying party is inside web app, Chromium refuse to download OIDC metadata because of lack of CORS headers
Fixed by !432 (merged)