diff --git a/src/main/resources/html/cors.html b/src/main/resources/html/cors.html
new file mode 100644
index 0000000000..5759bc2d5d
--- /dev/null
+++ b/src/main/resources/html/cors.html
@@ -0,0 +1,56 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <title>CORS TESTING</title>
+    <!-- Required meta tags -->
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
+    <!-- Bootstrap CSS -->
+    <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css" integrity="sha384-ggOyR0iXCbMQv3Xipma34MD+dH/1fQ784/j6cY/iJTQUOhcWr7x9JvoRxT2MZw1T" crossorigin="anonymous">
+</head>
+<body>
+<div class="container">
+    <h1>CORS TESTING</h1>
+    <!-- Content here -->
+    <p class="text-left">Update to your target API address:</p>
+    <input type="text" style="width:600px;height:30px;font-size:14px;" id="urlText" value="http://localhost:8080/search/user"/>
+    <p>&nbsp;
+    <p/>
+    <p class="text-left">Update to your Bearer Token:</p>
+    <input type="text" style="width:600px;height:30px;font-size:14px;" id="tokenTxt"  value=""/>
+    <p>&nbsp;
+    <p/>
+    <input type="button" class="btn btn-outline-primary" id="cors" value="CHECK CORS"/>
+</div>
+<!-- Optional JavaScript -->
+<!-- jQuery first, then Popper.js, then Bootstrap JS -->
+<script src="https://code.jquery.com/jquery-3.4.1.min.js" integrity="sha256-CSXorXvZcTkaix6Yvo6HppcZGetbYMGWSFlBw8HfCJo=" crossorigin="anonymous"></script>
+<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js" integrity="sha384-UO2eT0CpHqdSJQ6hJty5KVphtPhzWj9WO1clHTMGa3JDZwrnQq4sF86dIHNDz0W1" crossorigin="anonymous"></script>
+<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js" integrity="sha384-JjSmVgyd0p3pXB1rRibZUAYoIIy6OrQ6VrjIEaFf/nJGzIxFDsf4x0xIM+B07jRM" crossorigin="anonymous"></script>
+
+<script type="text/javascript">
+    $("#cors").on('click', function (event) {
+        event.preventDefault();
+        var url2 = $("#urlText").val();
+        $.get({
+            contentType: 'application/x-www-form-urlencoded;charset=UTF-8',
+            url: url2,
+            beforeSend: function (xhr) {
+
+                if ($("#tokenTxt").val().trim()) {
+                    /* Authorization header */
+                    xhr.setRequestHeader("Authorization", "Bearer " + $("#tokenTxt").val());
+                }
+            },
+
+            success: function (data) {
+                alert("success");
+            }
+        })
+    });
+
+</script>
+</body>
+</html>
+
