fix cors origin handling for wildcard

2026-07-30 23:36:15 +00:00 · 2026-02-13 09:50:02 +00:00
1 changed files with 8 additions and 1 deletions
@@ -168,9 +168,16 @@ async def lifespan(_: FastAPI) -> AsyncGenerator[None, None]:
 app = FastAPI(version=__version__, lifespan=lifespan)


+cors_origins = list(global_settings.cors_origins or [])
+cors_allow_origin_regex: str | None = None
+if "*" in cors_origins:
+    cors_origins = [origin for origin in cors_origins if origin != "*"]
+    cors_allow_origin_regex = ".*"
+
 app.add_middleware(
    CORSMiddleware,
-    allow_origins=global_settings.cors_origins,
+    allow_origins=cors_origins,
+    allow_origin_regex=cors_allow_origin_regex,
    allow_credentials=True,
    allow_methods=["*"],
    allow_headers=["*"],