How to add Access-Control-Allow-Origin header only if request came from https://example.org/ domain and request method was GET?

Question

Nginx

wrote this config, but for some reason header with the correct origin is still not added , you can't
use map

server {
    listen 80;
    server_name api.85f260ffe1ad0b24ff0ef6b645f46e25.kis.im;
    location / {
        set $cors '';
        set $cors_allowed_methods 'OPTIONS, HEAD, GET';

        if ($http_origin="https://example.org/")  {

            set $cors 'origin_matched';
        }

        if ($request_method = "GET") {
            set $cors '${cors} & preflight';
        }

        if ($cors = 'origin_matched & preflight') {
            add_header Access-Control-Allow-Origin $http_origin always;
}
            return 200;

    }
}

Answer 1

$http_origin ~ '^https:\/\/example\.org$'

Answer 2

You can use mapit, I tell you for sure.