CorsFilter.scala

package filters

import play.api.mvc._
import controllers.Default
import play.api.libs.iteratee.Enumerator
import play.Logger



object CorsFilter extends Filter {
  def isPreFlight(r: RequestHeader) =
    (
      r.method.toLowerCase().equals("options")
      &&
      r.headers.get("Access-Control-Request-Method").nonEmpty)
  
  override def apply(next: RequestHeader => Result)(request: RequestHeader): Result = {
    if (isPreFlight(request)) {
      Default.Ok.withHeaders(
        "Access-Control-Allow-Origin" -> request.headers.get("Origin").getOrElse("*"),
        "Access-Control-Allow-Methods" -> request.headers.get("Access-Control-Request-Method").getOrElse("*"),
        "Access-Control-Allow-Headers" -> request.headers.get("Access-Control-Request-Headers").getOrElse(""),
        "Access-Control-Allow-Credentials" -> "true" 
        )
    } else {

      next(request).withHeaders(
        "Access-Control-Allow-Origin" -> request.headers.get("Origin").getOrElse("*"),
        "Access-Control-Allow-Methods" -> request.headers.get("Access-Control-Request-Method").getOrElse("*"),
        "Access-Control-Allow-Headers" -> request.headers.get("Access-Control-Request-Headers").getOrElse(""),
        "Access-Control-Allow-Credentials" -> "true"
        )
    }
  }
}