Update app.py

app.py

@@ -47,6 +47,60 @@ def get_managers():
     # managersの部分だけ返す
     return jsonify(json_data.get("managers", []))
 
+@app.route("/cors-proxy")
+def corsproxy():
+    url = request.args.get("url")
+    if not url:
+        return "url パラメータが必要です", 400
+
+    # URLが http/https のみ許可（安全のため）
+    if not url.startswith("http://") and not url.startswith("https://"):
+        return "http または https のURLのみ使用できます", 400
+
+    try:
+        # 元URLへ転送
+        resp = requests.get(url, headers=request.headers, timeout=10)
+
+        # CORS対応レスポンスヘッダを付与
+        headers = {
+            "Access-Control-Allow-Origin": "*",
+            "Access-Control-Allow-Headers": "*",
+            "Access-Control-Allow-Methods": "GET, POST, OPTIONS"
+        }
+
+        return Response(resp.content, resp.status_code, headers=headers)
+
+    except Exception as e:
+        return f"エラー: {str(e)}", 500
+
+
+@app.route("/cors-proxy", methods=["POST"])
+def corsproxy_post():
+    url = request.args.get("url")
+    if not url:
+        return "url パラメータが必要です", 400
+
+    if not url.startswith("http://") and not url.startswith("https://"):
+        return "http または https のURLのみ使用できます", 400
+
+    try:
+        resp = requests.post(
+            url,
+            data=request.data,
+            headers=request.headers,
+            timeout=10
+        )
+
+        headers = {
+            "Access-Control-Allow-Origin": "*",
+            "Access-Control-Allow-Headers": "*",
+            "Access-Control-Allow-Methods": "GET, POST, OPTIONS"
+        }
+
+        return Response(resp.content, resp.status_code, headers=headers)
+
+    except Exception as e:
+        return f"エラー: {str(e)}", 500
 
 if __name__ == "__main__":
     app.run(debug=True, host="0.0.0.0", port=7860)