Initial API deployment

app.py

@@ -6,6 +6,7 @@ Déployé comme un Space HF gratuit (FastAPI / Docker).
 
 from fastapi import FastAPI
 from fastapi.middleware.cors import CORSMiddleware
+from fastapi.responses import JSONResponse
 
 app = FastAPI(title="Patient Context API")
 
@@ -17,6 +18,16 @@ app.add_middleware(
     allow_headers=["*"],
 )
 
+
+@app.middleware("http")
+async def force_json_headers(request, call_next):
+    response = await call_next(request)
+    response.headers["Access-Control-Allow-Origin"] = "*"
+    response.headers["Access-Control-Allow-Headers"] = "*"
+    response.headers["X-Frame-Options"] = "ALLOWALL"
+    return response
+
+
 # ──────────────────────────────────────────────
 # Base de données fictive (dict simple)
 # Clé = patient_id, Valeur = fiche patient