We've setup a REST Service in OSB 12c which is working as expected.
When calling the service from a browser an initial/preflight request is done to the service using the HTTP OPTIONS method.
However the response from the service doesn't include the 'Access-Control-Allow-Origin' header which is needed to allow the web site (which is on a different domain) to call the web service.
My question is, how do we add the 'Access-Control-Allow-Origin' response header for requests using the OPTIONS method. We are using the REST Adapter.