How can conditionally add CORS header depending on request access origin?

[michaelguo]

Example:

If request.header.origin equals example.com then add cors for example.com

but if request.header.origin equals apigee.com then ad cors for apigee.com

how can I add the condition checking?

The goal is limiting CORS to a list of allowed origins.