Update api/middleware.py

api/middleware.py

@@ -148,6 +148,7 @@ def get_cors_middleware_config():
         # Include null for file:// protocol and common local development origins
         allowed_origins = [
             "https://moazx-api.hf.space",
+            "https://huggingface.co",
             "http://localhost:8000",
             "http://127.0.0.1:8000",
             "http://localhost:5500",  # Live Server default port
@@ -160,7 +161,7 @@ def get_cors_middleware_config():
     return {
         "allow_origins": allowed_origins,
         "allow_credentials": True,
-        "allow_methods": ["*"],
-        "allow_headers": ["*"],
-        "expose_headers": ["*"],
+        "allow_methods": ["GET", "POST", "PUT", "DELETE", "OPTIONS"],
+        "allow_headers": ["Content-Type", "Authorization", "Accept", "Origin", "X-Requested-With", "Cookie"],
+        "expose_headers": ["Set-Cookie"],
     }