CORS for the WordPress REST API

wp_api_cors_headers.php

/**
*  CORS for the WordPress REST API
*/

function kms_wp_rest_api_cors() {
  remove_filter('rest_pre_serve_request', 'rest_send_cors_headers');
  add_filter('rest_pre_serve_request', function ($value) {
    header('Access-Control-Allow-Origin: *');
    header('Access-Control-Allow-Methods: GET');
    header('Access-Control-Allow-Credentials: true');
    header('Access-Control-Expose-Headers: Link', false);
    return $value;
  });
}
add_action('rest_api_init', __NAMESPACE__.'\\kms_wp_rest_api_cors', 15);