private boolean originIsAllowed(HttpServletRequest httpReq) {
        String origin = httpReq.getHeader("Origin").trim();
        return allowedCorsOrigins.contains("*") ||
            allowedCorsOrigins.contains(origin);
    }
Check if the origin of the request is in the list of allows cors origins.

@param httpReq the http servlet request
@return true if the origin is allowed, else false
common/servlet/src/main/java/io/apiman/common/servlet/ApimanCorsFilter.java