Merge pull request #32 from CUAHSI/rm-allow-origins

use allow_origins_regex for CORS

Author: devincowan

api/com_res/main.py

@@ -23,11 +23,14 @@
     swagger_ui_parameters=swagger_params,
 )
 
-origins = [get_settings().allow_origins]
+origins_from_settings = get_settings().allow_origins
+
+if origins_from_settings is None:
+    origins_from_settings = ".*"
 
 app.add_middleware(
     CORSMiddleware,
-    allow_origins=origins,
+    allow_origin_regex=origins_from_settings,
     allow_credentials=True,
     allow_methods=["*"],
     allow_headers=["*"],

env.template

@@ -36,7 +36,7 @@ VITE_APP_API_HOST=localhost
 VITE_APP_API_URL=https://localhost/api
 
 # ALLOW_ORIGINS=${VITE_APP_ORIGIN}
-ALLOW_ORIGINS=http://localhost:5173
+ALLOW_ORIGINS=.*localhost.*'
 
 # OAUTH2_REDIRECT_URL=${VITE_APP_API_URL}/auth/cuahsi/callback
 OAUTH2_REDIRECT_URL=https://localhost/api/auth/cuahsi/callback