XMLHttpRequest cannot load http://localhost:8082/database/customers. No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://localhost:8080' is therefore not allowed access. The response had HTTP status code 405.

I have CORS working for authentication from http://localhost:8080 is there a different place to allow this origin? for /database/customers outside of the application inside of the realm I have defined?
--