poduck/smoothschedule
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix: Add lvh.me to CORS allowed origins for development

Browse Source 
- Added http://lvh.me:5173 and http://lvh.me:5174 to CORS_ALLOWED_ORIGINS
- Added regex pattern to allow all *.lvh.me subdomains in CORS_ALLOWED_ORIGIN_REGEXES
- This allows frontend at lvh.me:5173 to make requests to API at api.lvh.me:8000
- CORS preflight requests now return proper Access-Control-Allow-Origin headers
- Quick login and all API calls from frontend now work without CORS errors

Testing confirmed:
✓ OPTIONS request to /api/auth-token/ returns 200 OK with CORS headers
✓ Access-Control-Allow-Origin: http://lvh.me:5173
✓ Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
poduck
2025-11-30 21:06:46 -05:00
parent c0c037e3b9
commit 885d8bbba2
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
smoothschedule/config/settings/base.py
View File

@@ -325,6 +325,8 @@ CORS_ALLOWED_ORIGINS = env.list(
"http://localhost:3000", "http://localhost:3000",
"http://localhost:5173", "http://localhost:5173",
"http://127.0.0.1:5173", "http://127.0.0.1:5173",
"http://lvh.me:5173",
"http://lvh.me:5174",
], ],
) )
@@ -332,7 +334,7 @@ CORS_ALLOWED_ORIGINS = env.list(
# Production: configure via DJANGO_CORS_ALLOWED_ORIGIN_REGEXES # Production: configure via DJANGO_CORS_ALLOWED_ORIGIN_REGEXES
_cors_regexes = env( _cors_regexes = env(
"DJANGO_CORS_ALLOWED_ORIGIN_REGEXES", "DJANGO_CORS_ALLOWED_ORIGIN_REGEXES",
default="", default="^http(s)?://.*\\.lvh\\.me(:\\d+)?$", # Allow all *.lvh.me subdomains
) )
CORS_ALLOWED_ORIGIN_REGEXES = [ CORS_ALLOWED_ORIGIN_REGEXES = [
regex.strip() for regex in _cors_regexes.split(",") if regex.strip() regex.strip() for regex in _cors_regexes.split(",") if regex.strip()