@Test
  public void doesNotAddHeadersWhenDisabled() {
    when(env.getRequiredProperty("nflow.rest.cors.enabled", Boolean.class)).thenReturn(FALSE);
    filter = new CorsHeaderContainerResponseFilter(env);

    filter.filter(requestContext, responseContext);

    verifyZeroInteractions(requestContext, responseContext);
  }
  @Test
  public void addsHeaders() {
    filter.filter(requestContext, responseContext);

    assertEquals(asList(HOST), headerMap.get("Access-Control-Allow-Origin"));
    assertEquals(asList(HEADERS), headerMap.get("Access-Control-Allow-Headers"));
    assertEquals(
        asList("OPTIONS, GET, POST, PUT, DELETE"), headerMap.get("Access-Control-Allow-Methods"));
    assertEquals(asList("true"), headerMap.get("Access-Control-Allow-Credentials"));
    verifyZeroInteractions(requestContext);
  }