Merge branch 'feature/auth-service-workflow' of github.com:Devasy23/splitwiser into feature/auth-service-workflow

Author: vrajpatelll

backend/.env.example

@@ -13,3 +13,4 @@ FIREBASE_SERVICE_ACCOUNT_PATH=./firebase-service-account.json
 
 # CORS Configuration
 ALLOWED_ORIGINS=http://localhost:3000,http://localhost:5173,http://127.0.0.1:3000,http://127.0.0.1:5173
+ALLOW_ALL_ORIGINS=False

backend/app/config.py

@@ -29,9 +29,9 @@ class Settings(BaseSettings):
     firebase_client_x509_cert_url: Optional[str] = None
       # App
     debug: bool = False
-    
-    # CORS - Add your frontend domain here for production
-    allowed_origins: str = "http://localhost:3000,http://localhost:5173,http://127.0.0.1:3000,http://127.0.0.1:5173,https://127.0.0.1:8081"
+      # CORS - Add your frontend domain here for production
+    allowed_origins: str = "http://localhost:3000,http://localhost:5173,http://127.0.0.1:3000,http://localhost:8081"
+    allow_all_origins: bool = False
 
     class Config:
         env_file = ".env"

backend/main.py

@@ -15,7 +15,12 @@
 
 # CORS middleware - Enhanced configuration for production
 allowed_origins = []
-if settings.allowed_origins:
+if settings.allow_all_origins:
+    # Allow all origins in development mode
+    allowed_origins = ["*"]
+    print("Development mode: CORS configured to allow all origins")
+elif settings.allowed_origins:
+    # Use specified origins in production mode
     allowed_origins = [origin.strip() for origin in settings.allowed_origins.split(",") if origin.strip()]
 else:
     # Fallback to allow all origins if not specified (not recommended for production)