Major Description
Currently, the list of allowed origins is hardcoded. But this is impractical for users wishing to deploy they own backend on unknown urls.
Therefore, the list of allowed urls must be derived from the currently active configuration.
A consequence is for instance that it is impossible to login on a unknown xwiki server as the server origin is not allowed (unless the electron app is modified and repackaged).