Function is_allowed_url 

pub fn is_allowed_url(url: &str) -> bool

Check if a URL is allowed (belongs to an APS domain)

Returns true if the URL’s host matches one of the allowed domains. Used for custom API calls to prevent credential leakage to external URLs.