Enable CORS on zephyr plugin on JIRA server

Hi anyone, i am already enable CORS option in JIRA setting, so any app outside of jira can access jira API without issue. Turns out if i am access jira endpoint related with zephyr specifically  on /rest/atm/1/bla bla bla, it get CORS issue due to the preflight request with OPTIONS method that automatically sent by browser will be not include authorization header that already setting up by my application. Anyone know how to solve this? Thanks before