I should as well point out that a 307 status code is meant to be a “temporary redirect” so this might be a misuse of it. I suspect the long term solution here is to not obfuscate or rewrite your API urls. At PKPPS we do not do this, as it leads to weird problems that are hard to debug.
Cheers,
Jason