Mimicking CORS preflight responses in Apache

gistfile1.txt

<VirtualHost _default_:443>
        ServerName yourhost
        ServerAdmin [email protected]

        SSLEngine on
        SSLCertificateFile /etc/ssl/private/yourorg.com.crt
        SSLCertificateKeyFile /etc/ssl/private/yourorg.com.key
        SSLCertificateChainFile /etc/ssl/private/chain.pem

        SSLProxyEngine          On
        ProxyRequests           Off
        ProxyPreserveHost       On

        RewriteEngine On
        RewriteCond %{REQUEST_METHOD} OPTIONS
        RewriteRule ^(.*)$ - [ENV=PREFLIGHT:true]

        SetEnvIf Origin "^(.*)$" ORIGIN=$0
        Header always set Access-Control-Allow-Origin %{ORIGIN}e env=PREFLIGHT
        Header always set Access-Control-Allow-Credentials "true" env=PREFLIGHT
        Header always set Access-Control-Allow-Methods "POST, GET, OPTIONS" env=PREFLIGHT

        RewriteCond %{REQUEST_METHOD} OPTIONS
        RewriteRule ^(.*)$ $1 [R=204,L]

        ProxyPass / http://host.yourorg.com:8087/
        ProxyPassReverse / http://host.yourorg.com:8087/
</VirtualHost>

works well on 2.4, thanks for this gist :)

nice. smart.