CrossOriginResourceSharingFilter (using Spring MVC) If you want to handle OPTIONS method, you should use Filter instead of Interceptor.

CrossOriginResourceSharingFilter.java

package utils;

import java.io.IOException;

import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import org.springframework.web.filter.OncePerRequestFilter;

public class CrossOriginResourceSharingFilter extends OncePerRequestFilter {

	@Override
	protected void doFilterInternal(HttpServletRequest request,
			HttpServletResponse response, FilterChain filterChain)
			throws ServletException, IOException {
		FilterConfig config = getFilterConfig();
		String allowOrigin = config.getInitParameter("allowOrigin");
		String maxAge = config.getInitParameter("maxAge");

		if ("OPTIONS".equalsIgnoreCase(request.getMethod())) {
			String requestedMethod = request
					.getHeader("Access-Control-Request-Method");
			String requestedHeaders = request
					.getHeader("Access-Control-Request-Headers");

			response.setHeader("Access-Control-Allow-Origin", allowOrigin);
			response.setHeader("Access-Control-Allow-Methods", requestedMethod);
			response.setHeader("Access-Control-Allow-Headers", requestedHeaders);
			response.setHeader("Access-Control-Max-Age", maxAge);
		} else {
			response.setHeader("Access-Control-Allow-Origin", allowOrigin);
			response.setHeader("Access-Control-Allow-Methods", "*");
			response.setHeader("Access-Control-Allow-Headers", "*");
			response.setHeader("Access-Control-Max-Age", maxAge);
		}

		filterChain.doFilter(request, response);
	}

}

web.xml

	<filter>
		<filter-name>cors-filter</filter-name>
		<filter-class>utils.CrossOriginResourceSharingFilter</filter-class>
		<async-supported>true</async-supported>
		<init-param>
			<param-name>allowOrigin</param-name>
			<param-value>*</param-value>
		</init-param>
		<init-param>
			<param-name>maxAge</param-name>
			<param-value>86400</param-value>
		</init-param>
	</filter>
	<filter-mapping>
		<filter-name>cors-filter</filter-name>
		<url-pattern>/api/*</url-pattern>
	</filter-mapping>