CrossOriginResourceSharingInterceptor When using @responsebody, response header SHOULD be set in the preHandler method.

CrossOriginResourceSharingInterceptor.java

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import org.springframework.web.servlet.HandlerInterceptor;
import org.springframework.web.servlet.ModelAndView;

public class CrossOriginResourceSharingInterceptor implements
  	HandlerInterceptor {

	private static final String DEFAULT_ALLOW_ORIGIN = "*";
	private static final String DEFAULT_ALLOW_METHODS = "*";
	private static final int DEFAULT_MAX_AGE = 86400;

	private String allowOrigin = DEFAULT_ALLOW_ORIGIN;
	private String allowMethods = DEFAULT_ALLOW_METHODS;
	private int maxAge = DEFAULT_MAX_AGE;

	public CrossOriginResourceSharingInterceptor setAllowOrigin(
			String allowOrigin) {
		this.allowOrigin = allowOrigin;
		return this;
	}

	public CrossOriginResourceSharingInterceptor setAllowMethods(
			String allowMethods) {
		this.allowMethods = allowMethods;
		return this;
	}

	public CrossOriginResourceSharingInterceptor setMaxAge(int maxAge) {
		this.maxAge = maxAge;
		return this;
	}

	@Override
	public boolean preHandle(HttpServletRequest request,
			HttpServletResponse response, Object handler) throws Exception {
		response.setHeader("Access-Control-Allow-Origin", allowOrigin);
		response.setHeader("Access-Control-Allow-Methods", allowMethods);
		response.setHeader("Access-Control-Max-Age", String.valueOf(maxAge));
		return true;
	}

	@Override
	public void postHandle(HttpServletRequest request,
			HttpServletResponse response, Object handler,
			ModelAndView modelAndView) throws Exception {
	}

	@Override
	public void afterCompletion(HttpServletRequest request,
			HttpServletResponse response, Object handler, Exception ex)
			throws Exception {
	}

}