We are working in a SharePoint application. The app is developed using AngularJS and deployed into our company SAAS sharepoint site. The AngularJS application is consumes web services hosted in application server. The Angular JS application invokes the DataPower url (reverse proxy) to get the data from application server (no communication from Angular JS app to Application Server). When we invoke the URL <https://company-qa.mycompany.com/path/services/resource> we are getting following error,

> 
> XMLHttpRequest cannot load
>  <https://company-qa.mycompany.com/path/services/resource>. Response to
>  preflight request doesn't pass access control check: No
>  'Access-Control-Allow-Origin' header is present on the requested
>  resource. Origin '<https://mycompany.sharepoint.com>' is therefore not
>  allowed access. The response had HTTP status code 401.
> 
> 
> 

The company-qa.mycompany.com is Data Power URL. We are given following Header Injection parameters in the Data Power

```
Access-Control-Allow-Credentials:true
Access-Control-Allow-Origin: https://mycompany.sharepoint.com

```

In the application server also, we have given above headers. Any clue, anything needs to be done in Sharepoint? Or any special header needs to be passed from AngularJS app?

Any help much appreciated.