VRaptor 4 CORS

CORSController

@Controller
public class CORSController {
 
	@Inject private Result result;
	@Inject private Router router;
 
	@Options("/*")
	public void options(@Observes VRaptorRequestStarted requestInfo) {
		Set<HttpMethod> allowed = router.allowedMethodsFor(requestInfo.getRequest().getRequestedUri());
		String allowMethods = allowed.toString().replaceAll("\\[|\\]", "");
		result.use(Results.status()).header("Allow", allowMethods);
		result.use(Results.status()).header("Access-Control-Allow-Methods", allowMethods);
		result.use(Results.status()).header("Access-Control-Allow-Headers", "Content-Type, X-Requested-With, accept, Authorization, origin");
	}
}

CORSInterceptor

@Intercepts
public class CORSInterceptor {
	
	@Inject private Result result;
	@Inject private HttpServletRequest request;
	
	@BeforeCall
	public void intercept() throws InterceptionException {
		String origin = request.getHeader("origin") != null ? request.getHeader("origin") : "*";
		result.use(Results.status()).header("Access-Control-Allow-Origin", origin); 
		result.use(Results.status()).header("Access-Control-Allow-Credentials", "true");
    	result.use(Results.status()).header("Access-Control-Expose-Headers", "Content-Type, Location");
	}
}