Salesforce APEX support

Requirements are exposing 2 links to other apps like below to open contact record details. The URL will need to open as widget in another web page so CORS considerations needs to be handled

Sample URLs:
https://ap4.lightning.force.com/apex/ContactPop?EMAIL={email}
https://ap4.lightning.force.com/apex/ContactPop?PHONE={phone}