title: Cross domain problems with WSO2 API Manager
body: <p>We have develop some APIs for a client and we have published them through API Manager. We have provided the client with some code examples on PHP which work fine. The only problem is that they are using those APIs through AJAX in a different domain to the one associated with AM. Is this a cross domain problem?</p>
  
  <p>I have tried setting the apache server in front of API Manager with the following headers, so that cross domain is allowed</p>
  
  <pre><code>Access-Control-Allow-Credentials: true
  Access-Control-Allow-Headers: Authorization, Content-Type, Accept
  Access-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS
  Access-Control-Allow-Origin: * 
  </code></pre>
  
  <p>But even with these headers, I still get a 401 Unauthorizaed when making calls to AM. I have tried making the requests directly to AM without going through Apache (port 8282) but we still get the same problem.</p>