Angular + Cordova app for iOS with WKWebView encounters CORS issue

I have an Angular app which is for all the devices (Desktop, iPad, and mobile devices using the browser) and the same app(with a subset of original functionality) with Cordova for iOS with WKWebView.
if the app is run with keycloak WebOrigin as “*” everything works fine, however, my company’s IT team is not allowing to have * in the Web Origin.
since the app is the web as well as the hybrid is it allowed to have * in the web-origin?
is there any other option that can be used for this?