updated CORS

main.py

@@ -8,6 +8,7 @@ from typing import Any, Dict, Optional, Tuple
 from functools import lru_cache
 
 from fastapi import FastAPI
+from fastapi.middleware.cors import CORSMiddleware
 from pydantic import BaseModel
 from huggingface_hub import hf_hub_download
 from llama_cpp import Llama
@@ -43,6 +44,25 @@ GEN_LOCK = asyncio.Lock()
 
 app = FastAPI(title="FADES Fallacy Detector (GGUF / llama.cpp)")
 
+# ----------------------------
+# CORS (for browser front-ends)
+# ----------------------------
+# Comma-separated list of allowed origins, or "*" to allow all.
+_CORS_ORIGINS = os.getenv("CORS_ALLOW_ORIGINS", "*").strip()
+if _CORS_ORIGINS == "*" or not _CORS_ORIGINS:
+    allow_origins = ["*"]
+else:
+    allow_origins = [o.strip() for o in _CORS_ORIGINS.split(",") if o.strip()]
+
+# Note: when allow_origins=["*"], allow_credentials must be False.
+app.add_middleware(
+    CORSMiddleware,
+    allow_origins=allow_origins,
+    allow_credentials=False,
+    allow_methods=["*"],
+    allow_headers=["*"],
+)
+
 # ----------------------------
 # Request model
 # ----------------------------