nginx代理服务器上的CORS：跨域请求被阻止：同源策略不允许读取远程资源

我将我的API从一个子域移动到另一个，而不会影响已经运行的应用程序。 我在nginx上configuration了三个服务器，例如：

原始API服务器：

server { listen 80; server_name example.com; root /var/www/example/; index index.php index.html index.htm; try_files $uri $uri/ /index.php?$args; add_header 'Access-Control-Allow-Origin' '*'; location / { try_files $uri $uri/ /index.php?$args; } location ~*/api/([a-zA-Z0-9_]+) { proxy_pass http://127.0.0.1:4343/api/$1; proxy_read_timeout 60s; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header 'Access-Control-Allow-Origin' '*'; proxy_set_header 'Access-Control-Allow-Credentials' true; } ... } 

代理服务器通过：

 server { listen 4343; server_name _; root /var/www/exampleapi/; index index.php index.html index.htm; try_files $uri $uri/ /index.php?$args; add_header 'Access-Control-Allow-Origin' '*'; location / { try_files $uri $uri/ /index.php?$args; } ... } 

AJAX调用用于在旧的apis上完美工作，但是对于新的我在FF上收到错误：

• eXist后面的Apache代理 – 身份validation
• / var / lib / nginx / proxy来自哪里？
• 如何设置持久连接的Apache转发代理？
• OpenVPN作为代理
• ssl nginx代理configuration为roundcube

 Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://example.com/api/startup. (Reason: CORS header 'Access-Control-Allow-Origin' does not match '*, *'). 

在Safari上：

 XMLHttpRequest cannot load https://example.com/api/startup. Origin https://myclient.com is not allowed by Access-Control-Allow-Origin. 

冰壶在新的和老apis展示：

 HTTP/1.1 200 OK Access-Control-Allow-Origin: * 

我该如何解决这个问题？

 server { listen 4343; server_name _; root /var/www/exampleapi/; index index.php index.html index.htm; try_files $uri $uri/ /index.php?$args; location / { try_files $uri $uri/ /index.php?$args; } ... }