CorsAction.java

public static class CorsAction extends Action.Simple {
  public Result call(Context context) throws Throwable{
    Response response = context.response();
    response.setHeader("Access-Control-Allow-Origin", *);
    response.setHeader("Access-Control-Allow-Headers","X-Requested-With");
    return delegate.call(context);
  }
}