CORS Header for OAUTH2 APM

Hi,

I solved the issue without layered VS. I't simply using HTTP_RESPONSE_RELEASE instead of HTTP_RESPONSE

when CLIENT_ACCEPTED {
 ACCESS::restrict_irule_events disable
}

when HTTP_REQUEST {
    unset -nocomplain cors_origin
    if { [HTTP::header "Origin"] contains "mydomain.com" } {
        set cors_origin [HTTP::header "Origin"]
        log local0. "CORS Origin seen: [HTTP::header "Origin"]"
    }
}

when HTTP_RESPONSE_RELEASE {
     CORS GET/POST response - check cors_origin variable set in request
    if { [info exists cors_origin] } {
        HTTP::header insert "Access-Control-Allow-Origin" $cors_origin
    log local0. "CORS Header sent: Access-Control-Allow-Origin $cors_origin"
   }
}