fyp

main.py

@@ -215,25 +215,27 @@ app.state.limiter = limiter
 app.add_exception_handler(RateLimitExceeded, rate_limit_exceeded_handler)
 app.add_middleware(SlowAPIMiddleware)
 
-# CORS
-cors_origins = [
-    "https://lojiz.onrender.com",
-    "https://lojiz.com",
-    "https://www.lojiz.com",
-] if is_production else [
-    "http://localhost",
-    "http://localhost:3000",
-    "http://localhost:5173",
-    "http://localhost:8080",  # Test UI
-    "http://127.0.0.1",
-    "http://127.0.0.1:3000",
-    "http://127.0.0.1:5173",
-    "http://127.0.0.1:8080",  # Test UI
-]
+# CORS - Allow all localhost ports in development
+if is_production:
+    cors_origins = [
+        "https://lojiz.onrender.com",
+        "https://lojiz.com",
+        "https://www.lojiz.com",
+    ]
+    cors_origin_regex = None
+else:
+    # Development - allow any localhost port (Flutter uses random ports like 50421)
+    cors_origins = [
+        "http://localhost",
+        "http://127.0.0.1",
+    ]
+    # Regex to match localhost with any port
+    cors_origin_regex = r"^https?://(localhost|127\.0\.0\.1)(:\d+)?$"
 
 app.add_middleware(
     CORSMiddleware,
     allow_origins=cors_origins,
+    allow_origin_regex=cors_origin_regex,
     allow_credentials=True,
     allow_methods=["*"],
     allow_headers=["*"],