I feel like there has to be a better way to deal with these requests... New project, AngularJS client-side, Slim (or Silex, I'm playing with both) server-side. Every request from AngularJS attempts an OPTIONS request first, which isn't a valid route. I'd MUCH rather proxy the requests to a single method via application middleware, but the sheer …

.htaccess

<IfModule mod_headers.c>
    Header set Access-Control-Allow-Origin "*"
    Header set Access-Control-Allow-Headers "X-Requested-With"
    Header set Access-Control-Allow-Methods "GET, POST, PUT, DELETE, OPTIONS"
</IfModule>

<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteBase /

    # Stupidly handle CORS requests here, since wildcard routes are a no-go.
	RewriteCond %{REQUEST_METHOD} OPTIONS
		RewriteRule ^ cors.php [L]

    RewriteCond %{REQUEST_FILENAME} !-f
		RewriteRule ^ index.php [L]
</IfModule>

cors.php

<?php

header('Access-Control-Allow-Origin: *');
header('Access-Control-Allow-Headers: X-Requested-With');
header('Access-Control-Allow-Methods: GET, POST, PUT, DELETE');