RewriteEngine On
RewriteCond %{HTTP:Authorization} ^(.*)
RewriteRule .* - [e=HTTP_AUTHORIZATION:%1]

RewriteRule ^access-token/b2b$ access-token.php [L]
RewriteRule ^transfer-va/inquiry$ inquiry.php [L]
RewriteRule ^transfer-va/payment$ payment.php [L]

<IfModule mod_headers.c>
    Header always set Access-Control-Allow-Origin "https://apidevportal.aspi-indonesia.or.id"
    Header always set Access-Control-Allow-Methods "POST, GET, PUT, DELETE, OPTIONS"
    Header always set Access-Control-Allow-Headers "X-TIMESTAMP, X-CLIENT-KEY, X-CLIENT-SECRET, Content-Type, X-SIGNATURE, Accept, Authorization, Authorization-Customer, ORIGIN, X-PARTNER-ID, X-EXTERNAL-ID, X-IP-ADDRESS, X-DEVICE-ID, CHANNEL-ID, X-LATITUDE, X-LONGITUDE"
</IfModule>

# Menangani Preflight OPTIONS Request
RewriteCond %{REQUEST_METHOD} OPTIONS
RewriteRule ^(.*)$ $1 [R=200,L]