<filter>
  <filter-name>CorsFilter</filter-name>
  <filter-class>org.apache.catalina.filters.CorsFilter</filter-class>
</filter>
<filter-mapping>
  <filter-name>CorsFilter</filter-name>
  <url-pattern>/*</url-pattern>
</filter-mapping>

function listReviews() {
    $.get("http://mydomain:7990/rest/api/1.0/projects/", function(data) {
        // ...
    });
}

{"size":0,"limit":25,"isLastPage":true,"values":[],"start":0}

function listReviews() {
    var urlBase = 'http://mydomain:7990/rest/api/1.0/';
    var urlPart = 'projects/';
    var urlFull = urlBase+urlPart;
    var username = 'username';
    var password = 'password';

    $.ajax({
        type: 'GET',
        url: urlFull,
        dataType: 'json',
        context: this,
        beforeSend: function (xhr) {
            xhr.setRequestHeader ("Authorization", "Basic " + btoa(username + ":" + password));
        },
        success: function() { $('#content').append("success<br>"); },
        error: function() { $('#content').append("fail<br>"); }
    });
}

Access-Control-Allow-Credentials:true
Access-Control-Allow-Origin:http://mydomain