@Test
void post() {

    when(request.header("Origin")).thenReturn(Optional.of("localhost"));
    when(request.body()).thenReturn(Optional.empty());
    var controller = new EventController(List.of("localhost"), null);
    Response response = controller.post(request);
    assertThat(response.header("Access-Control-Allow-Origin")).get().isEqualTo("localhost");
    assertThat(response.header("Access-Control-Allow-Credentials")).get().isEqualTo("true");
}