spring:
  web:
    cors:
      max-age: 3600
      allowed-methods: GET, POST, PUT, DELETE
      allowed-headers: "*"
      cors-configurations:
        - patterns: "/api/**"
          allowed-origins: "https://specific-host1.com", "https://specific-host2.com"
        - patterns: "/other-api/**"
          allowed-origins: "*"