Implementing Cross Origin Resource Sharing (CORS) with Credentials

We plan to run javascript apps hosted on several different servers that consume NEO4J data thats hosted on a separate server.

The NEO4J documentation indicates that the "dbms.security.http_access_control_allow_origin" configuration setting can have the value "*" (e.g. all URLs) or a single URL value. The CORS specification indicates that the "Access-Control-Allow-Origin" value must be set to the actual origin value when using credentials else "Attempting to use the wildcard with credentials results in an error".

Does anyone have a suggested implementation to enable CORS with credentials?

Thanks

Mark