Using the CORS Allowlists REST API

CORS allowlist data is handled as a single resource. The single resource handles all three allowlists. Each allowlist is specified as an array of valid hosts. For example:

{
    "hub": [
        "https://mysite.example.com",
        "https://10.187.106.81"
    ],
    "interview": [
        "https://mysite.example.com"
    ],
    "determinationsServer": [
    ]
}

An empty list indicates that all hosts are allowed. To modify a single CORS allowlist, issue a PATCH request:

{
    "interview": ["https://mysite.example.com"]
}

This updates the interview allowlist, but the determinations server and hub allowlists are unaltered.