Apache HTTPD configuration - Enable CORS for NetLicensing API (RESTful)

Enable CORS for NetLicensing API (RESTful)

<VirtualHost netlicensing.labs64.com:443>
  
  ...
  
  <Location /core>
    # CORS withCredentials=false (without cookies)
    Header always set Access-Control-Allow-Origin "*"
    Header always set Access-Control-Allow-Methods "GET, POST, PUT, DELETE, OPTIONS"
    Header always set Access-Control-Allow-Headers "Content-Type, Accept, Authorization"
    Header always set Access-Control-Max-Age: "3600"
    RewriteEngine On
    RewriteCond %{REQUEST_METHOD} OPTIONS
    RewriteRule ^(.*)$ $1 [R=200,L,E=HTTP_ORIGIN:%{HTTP:ORIGIN}]]

    # CORS withCredentials=true (with cookies)
    SetEnvIfNoCase ORIGIN (.*) ORIGIN=$1
    Header always set Access-Control-Allow-Methods "GET, POST, PUT, DELETE, OPTIONS"
    Header always set Access-Control-Allow-Origin "%{ORIGIN}e"
    Header always set Access-Control-Allow-Credentials "true"
    Header always set Access-Control-Allow-Headers "Content-Type, Accept, Authorization"
    Header always set Access-Control-Max-Age: "3600"
    RewriteEngine On
    RewriteCond %{REQUEST_METHOD} OPTIONS
    RewriteRule ^(.*)$ $1 [R=200,L,E=HTTP_ORIGIN:%{HTTP:ORIGIN}]
  </Location>

  ...

</VirtualHost>

Test URL: http://io.labs64.com/NetLicensing-API/