Headers was indeed sent via http:
However, fetch returned empty headers:
It turns out that I need to set Access-Control-Expose-Headers to include the headers I would like to expose.
Access-Control-Expose-Headers