add Cors

app.py

@@ -308,12 +308,19 @@ def analyze_image(pil_img: Image.Image) -> Dict[str, Any]:
 # -----------------------
 app = FastAPI(title="ViT Explainer API", version="1.0")
 
+origins = [
+    "http://localhost:5173",
+    "http://127.0.0.1:5173",
+    "https://vit-explainer.vercel.app"
+]
+
 app.add_middleware(
     CORSMiddleware,
-    allow_origins=["*"],  # tighten in prod
-    allow_credentials=True,
+    allow_origins=origins,
+    allow_credentials=False,   # ✅ lo más simple (sin cookies)
     allow_methods=["*"],
     allow_headers=["*"],
+    max_age=86400,
 )
 
 # In-memory store for "file-like endpoints" (job-based)