@1antares1 ORS enabled this response headers using postman
access-control-allow-headers →Authorization, Content-Type
access-control-allow-methods →POST, GET, OPTIONS, PUT, DELETE
access-control-allow-origin →*
access-control-expose-headers →X-WP-Total, X-WP-TotalPages
allow →GET, POST
cache-control →no-transform, no-cache, no-store, must-revalidate
content-encoding →gzip
content-length →6009
content-type →application/json; charset=UTF-8
date →Fri, 11 Sep 2020 21:49:12 GMT
expires →Wed, 11 Jan 1984 05:00:00 GMT
link →<https://sit.com/wp-json/>; rel="https://api.w.org/"
pragma →no-cache
referrer-policy →no-referrer-when-downgrade
server →Apache
status →200
vary →Accept-Encoding,User-Agent
x-content-type-options →nosniff
x-powered-by →PHP/7.2.33
x-robots-tag →noindex
x-wp-total →6
x-wp-totalpages →1