Our config.json like:
"SiteURL": "https://our.domain.com"
"AllowCorsFrom": "*",
that is work
"SiteURL": "https://our.domain.com"
"AllowCorsFrom": "*.domain.com"
or
"SiteURL": "https://our.domain.com"
"AllowCorsFrom": "our.domain.com"
that is not work