Great work on this developer hub - nice clean documentation that was easy to follow.
Only issue I encountered was that the domains do not cater for the sub domain www. I’m sure others may fall into that issue - ie mydomain.com works fine but www.mydomain.com does not.
Looking forward to playing with the other options as they become available.
Wildcard domains are not supported, therefore you have to be exact about the host your client will send in the Origin: header. I think clarifying documentation will help.
This is unlikely to cause clients any operational issues, and multiple distinct hosts for a single application are rare. However, if needed, up to five distinct host domains can be configured for an API key.