This is a very simple implementation on how to handle the pre-flight options on Restify without filter of Origin.

restify.coffee

# Handling the OPTIONS method requests by browsers.
unkMH = (req, res) ->
  if req.method.toLowerCase() is 'options'
    allowHeaders = ['Accept', 'Accept-Version', 'Content-Type', 'Api-Version', 'Authorization']
    if res.methods.indexOf('OPTIONS') is -1
      res.methods.push('OPTIONS')

    res.header 'Access-Control-Allow-Credentials', true
    res.header 'Access-Control-Allow-Headers', allowHeaders.join ', '
    res.header 'Access-Control-Allow-Methods', res.methods.join ', '
    res.header 'Access-Control-Allow-Origin', req.headers.origin

    return res.send 204
  else
    return res.send new restify.MethodNotAllowedError()

app.on 'MethodNotAllowed', unkMH