nginx https proxy pass cors withcredentials

server {
	listen 443;
	server_name			xxx.toto.com;

	add_header			Strict-Transport-Security "max-age=63072000; includeSubdomains; preload";

	ssl on;
	ssl_certificate		/etc/nginx/ssl.key/cacert-toto.com.chained.crt;
	ssl_certificate_key	/etc/nginx/ssl.key/cacert-toto.com.key;

	proxy_set_header	X-Forwarded-For		$remote_addr;
	proxy_set_header	X-SMF-FORWARDED-IP	$remote_addr;
	proxy_set_header	X-SM-BACKEND		$back_host;
	proxy_set_header	X-SM-FWPROTO		https;
	proxy_set_header	Host				$host;
	proxy_set_header	X-Forwarded-Host	$host;
	proxy_set_header	X-Forwarded-Server	$host;

	set $back_host		192.168.1.1;
	set $back_port		9400;

	location / {
		more_set_headers 'Access-Control-Allow-Origin: $http_origin';
		more_set_headers 'Access-Control-Allow-Credentials: true';
		more_set_headers 'Access-Control-Allow-Methods: GET, POST, OPTIONS';
		more_set_headers 'Access-Control-Allow-Headers: Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';
		if ($request_method = 'OPTIONS') {
			more_set_headers 'Access-Control-Max-Age: 1728000';
			more_set_headers 'Content-Type: text/plain charset=UTF-8';
			more_set_headers 'Content-Length: 0';
			return 204;
		}
		proxy_pass	http://$back_host:$back_port$req_uri;
	}
}