RewriteEngine on RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}] SetHandler application/x-httpd-php Header set Access-Control-Allow-Origin "*" Header set Access-Control-Allow-Methods "GET" Header set Access-Control-Allow-Headers "X-Requested-With, Content-Type, Accept, Origin, Authorization"