CORS XHR (jQuery/Flask)

send.js

  function sendData(url, data, onSuccess, onError) {

    $.ajax({
        url: url,
        type: 'POST',
        data: data,
        dataType: 'json',
        xhrFields: {
          withCredentials: true
        },
        success: function(responseJSON) {
          onSuccess(processJSON(responseJSON));
        },
        error: function(xhr, textStatus, errorThrown) {
          onError(errorThrown);
        }
    });
  }

views.py

def any_response(data):
    response = make_response(data)
    origin = request.headers.get('Origin', '')
    if origin.endswith('mydomain.com'):
        response.headers['Access-Control-Allow-Origin'] = origin
        response.headers['Access-Control-Allow-Credentials'] = 'true'
    return response

Many thanks!