The Access-Control-Allow-Methods value. Empty omits the header.
Access-Control-Allow-Methods
final List<String> allowMethods;