Rest Adapter CORS configuration based on environment

Organization Name (Required - If you are an Oracle Partner, please provide the organization you are logging the idea on behalf of):

Description (Required):

we are trying to move away from Basic Auth and re-configure our connection using OAuth Resource Owner. While trying to do so in VBCS and call OIC services, we had do enable CORS for the OIC service and include the vbcs url in the allowed list. These services are called from multiple VBCS applications and some of them have vanity urls.
To move away from being specific to the environment, we tried using wildcard like e.g., "https://*.builder.ocp.oraclegovcloud.uk, https://pdev1.app.****.xx.xx.uk/" but that didn't work. However if we include "https://her-as-l-****-vbc-1-****.builder.ocp.****.uk" then it works.