Merge development: fix CORS for local dev on port 3001

Resolved conflict by keeping env var approach from main and updating the default to include both localhost:3000 and localhost:3001. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Make CORS allowed origins configurable via ALLOWED_ORIGINS env var
2026-03-24 18:58:50 +01:00 · 2026-03-24 18:15:44 +01:00
1 changed files with 5 additions and 1 deletions
@@ -1,3 +1,5 @@
+import os
+
 from fastapi import FastAPI
 from fastapi.middleware.cors import CORSMiddleware

@@ -8,9 +10,11 @@ Base.metadata.create_all(bind=engine)

 app = FastAPI(title="BTC Portfolio API")

+origins = os.getenv("ALLOWED_ORIGINS", "http://localhost:3000,http://localhost:3001").split(",")
+
 app.add_middleware(
    CORSMiddleware,
-    allow_origins=["http://localhost:3000", "http://localhost:3001"],
+    allow_origins=origins,
    allow_credentials=True,
    allow_methods=["*"],
    allow_headers=["*"],