public ApiRestletApplication() { super(); parseOperationsForApiRoutes(); // add the CORS service so others can access the service final CorsService corsService = new CorsService(); corsService.setAllowedOrigins(new HashSet(Arrays.asList("*"))); corsService.setAllowedCredentials(true); getServices().add(corsService); }