CorsAction.java

public static class CorsAction extends Action.Simple {
  public Result call(Context context) throws Throwable{
    Response response = context.response();
    response.setHeader("Access-Control-Allow-Origin", *);

    //Handle preflight requests
    if(context.request().method().equals("OPTIONS")) {
      response.setHeader("Access-Control-Allow-Methods", "POST");
      response.setHeader("Access-Control-Max-Age", "3600");
      response.setHeader("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept");
      
      return ok();
    }

    response.setHeader("Access-Control-Allow-Headers","X-Requested-With");
    return delegate.call(context);
  }
}