哪种响应契约能让获准前端读取credentials设为include的跨源fetch响应？

哪种响应契约能让获准前端读取credentials设为include的跨源fetch响应？

1. 精确匹配的Access-Control-Allow-Origin，加上值为true的Access-Control-Allow-Credentials
2. 只把Access-Control-Allow-Origin设置为星号
3. 只把Access-Control-Allow-Credentials设置为true，不返回Access-Control-Allow-Origin