diff --git a/etc/api-paste.ini b/etc/api-paste.ini
index 3e79feb9e69..4884fe382c8 100644
--- a/etc/api-paste.ini
+++ b/etc/api-paste.ini
@@ -17,8 +17,8 @@ paste.filter_factory = oslo_middleware:CatchErrors.factory
 [filter:cors]
 paste.filter_factory = oslo_middleware.cors:filter_factory
 oslo_config_project = neutron
-latent_allow_headers = X-Auth-Token, X-Openstack-Request-Id
-latent_expose_headers = X-Auth-Token, X-Openstack-Request-Id
+latent_allow_headers = X-Auth-Token, X-Identity-Status, X-Roles, X-Service-Catalog, X-User-Id, X-Tenant-Id, X-OpenStack-Request-ID
+latent_expose_headers = X-Auth-Token, X-Subject-Token, X-Service-Token, X-OpenStack-Request-ID
 latent_allow_methods = GET, PUT, POST, DELETE, PATCH
 
 [filter:keystonecontext]
diff --git a/neutron/pecan_wsgi/app.py b/neutron/pecan_wsgi/app.py
index 67721f4425c..4dcc5bb7835 100644
--- a/neutron/pecan_wsgi/app.py
+++ b/neutron/pecan_wsgi/app.py
@@ -83,9 +83,12 @@ def _wrap_app(app):
     # by the browser.
     app = cors.CORS(app, cfg.CONF)
     app.set_latent(
-        allow_headers=['X-Auth-Token', 'X-Openstack-Request-Id'],
+        allow_headers=['X-Auth-Token', 'X-Identity-Status', 'X-Roles',
+                       'X-Service-Catalog', 'X-User-Id', 'X-Tenant-Id',
+                       'X-OpenStack-Request-ID'],
         allow_methods=['GET', 'PUT', 'POST', 'DELETE', 'PATCH'],
-        expose_headers=['X-Auth-Token', 'X-Openstack-Request-Id']
+        expose_headers=['X-Auth-Token', 'X-Subject-Token', 'X-Service-Token',
+                        'X-OpenStack-Request-ID']
     )
 
     return app