If realm is amedia, the cors logic should allow any domain that will result in a valid publication through Amedia::Properties.publication_service.