can OData + CORS + HTTPS be made to work?

Hi all,

I'm developing a UI5 application which must invoke a HANA Odata service using the ODataModel.

The UI5 application is published at a url other that the OData service (I'm on the Cloud).

The Odata service requires authentication and I can see at thread http://scn.sap.com/thread/3477205 that CORS + authentication cannot be made to work.

So my question would be whether there's any other way to perform this task or it is straightaway not feasible.

Thanks regards

Vincenzo