public CorsServiceBuilder allowCredentials() {
        if (anyOriginSupported) {
            logger.warn(
                    "allowCredentials has been enabled for any origin (*). It will work properly" +
                    " but it would be better disabled or enabled with specified origins for security." +
                    " Visit https://www.w3.org/TR/cors/#supports-credentials for more information.");
        }
        firstPolicyBuilder.allowCredentials();
        return this;
    }
Enables cookies to be added to CORS requests.
Calling this method will set the CORS {@code "Access-Control-Allow-Credentials"} response header
to {@code true}. By default, cookies are not included in CORS requests.

<p>Please note, that cookie support needs to be enabled on the client side as well.
The client needs to opt-in to send cookies by calling:
<pre>{@code
xhr.withCredentials = true;
}</pre>

<p>The default value for {@code 'withCredentials'} is {@code false} in which case no cookies are sent.
Setting this to {@code true} will include cookies in cross origin requests.

@return {@link CorsServiceBuilder} to support method chaining.
core/src/main/java/com/linecorp/armeria/server/cors/CorsServiceBuilder.java