response.addHeader("Access-Control-Expose-Headers", "Your-Header-Name1, Your-Header-Name2, Your-Header-Name3");