How to Restrict to a Certain Domain to Access to Endpoint and Function

How do I create a rule, allowing only a certain domain to access my endpoint functions?
I was successful on restricting my IP address:

    {
      "%%request.remoteIPAddress": {
        "$in": ["XXX.XX.XX.XX"]
      }
    }

However, I need to restrict to only two domains.
How can I do that?

1 Like