Allow Access-Control-Allow-Origin (CORS) policy to be set via dashboard

We have recently had our product pen-tested externally and a key point was about limiting access to authentication API's as the current CORS policy allows all Access-Control-Allow-Origin: * > Cross-origin Resource Sharing (CORS) Misconfiguration Cross-origin Resource Sharing (CORS) is a security feature implemented in web browsers to prevent unauthorised access to resources from different domains. However, if not properly configured, it can be exploited to allow arbitrary origins, leading to potential data leakage or unauthorised actions. In this case, our system has been found to trust arbitrary origins, which means it's currently possible for external websites to access our resources without proper authorisation. This misconfiguration could allow sensitive data to be exposed or malicious actions to be performed, posing a significant risk to our organisation's security and privacy It would be beneficial to be able to set this explicitly in the dashboard, this …