Can allowed_origins_patterns include wildcards for subdomains

Here's an example configuration that allows access from any subdomain of `example.com`:

php
return [
    'paths' => ['api/*'],
    'allowed_methods' => ['*'],
    'allowed_origins' => ['*'],
    'allowed_origins_patterns' => ['/^https?:\/\/(.+\.)?example\.com$/'],
    'allowed_headers' => ['*'],
    'exposed_headers' => [],
    'max_age' => 0,
    'supports_credentials' => true,
];

In this configuration, the `allowed_origins_patterns` option uses a regular expression pattern to match any subdomain of `example.com`. The pattern `/^https?:\/\/(.+\.)?example\.com$/` will match URLs like:

- `https://example.com`
- `https://example.com`
- `https://subdomain.example.com`
- `https://subdomain.example.com`

The `(.+\.)` part of the pattern matches one or more subdomains, followed by the base domain `example.com`.

Using wildcards in `allowed_origins_patterns` provides more flexibility compared to the `allowed_origins` option, which only allows you to specify exact domain matches or the wildcard `'*'` to allow all origins.

However, keep in mind that using regular expressions can be less performant than exact string matching, so it's generally recommended to use `allowed_origins` whenever possible, and only use `allowed_origins_patterns` when you need more complex origin matching.