CORS Allowed Origins
Manage which domains can make cross-origin requests to your API
Wildcard patterns
Use https://*.example.com to allow all subdomains. Wildcards only match one level of subdomain.
https://*.example.com