How to add `Access-Control-Expose-Headers` to POST /login endpoint?

Question

My goal is to get the X-Auth-Token header using JavaScript.

let username = document.getElementById("username").value;
let password = docume