CORS allowlisting

CORS origin configuration is a form of allowlisting mechanism for the back-end API to determine the origin of the web applications that are allowed to request resources from a different domain. This must be configured with the identity of the front-end web application so that the front-end application is allowed to access the API, and no other applications are allowed access.